SAINT Scanner and SAINTExploit

Vulnerability scanning and Penetration Testing have are critical parts of a corporate information security posture and are mandated by most information security regulations. The SAINT Corporation provides best-of-breed products for vulnerability management and exploit testing in an integrated platform that provides a cost-effective solution for businesses.

SAINT Vulnerability Scanner

SAINT, or the Security Administrator's Integrated Network Tool, uncovers areas of weakness and recommends fixes. With the SAINT® vulnerability scanner, you can:

Detect and fix possible weaknesses in your network’s security before they can be exploited by intruders.
Anticipate and prevent common system vulnerabilities.
Demonstrate compliance with current government regulations such as FISMA, SOX, GLBA, HIPAA, and COPPA and with industry regulations such as PCI DSS.

SAINT scanner is the ideal cornerstone for your vulnerability assessment program. SAINT features a graphical user interface that is intuitive and easy to use. Benefits of the SAINT vulnerability scanning solution include:

Lets you exploit vulnerabilities found by the scanner with the integrated penetration testing tool, SAINTexploit™.
Shows you how to fix the vulnerabilities, and where to begin remediation efforts —with the exploitable vulnerabilities.
Lets you scan and exploit both IPv4 and IPv6 addresses.
Shows you if the network is compliant with PCI security standards. SAINT is certified by the Payment Card Industry (PCI) Security Standaards Council as an Approved Scanning Vendor.
Correlates CVE , CVSS, the presence of exploits, and more.
Allows you to design and generate vulnerability assessment reports quickly and easily. Lets you present the findings of even the largest network scans in an easy-to-read format with colorful charts.
Shows you if your network security is improving over time by using the trend analysis report.
Gives you the following cross references, which can be automatically correlated in reports: CVE, IAVA, OSVDB, BID, CVSS 2.0 (PCI requirement), and SANS/FBI Top 20.
Gives you the option to store the vulnerability data locally or remotely; your vulnerability data does not need to be sent across the Internet as it does with some other scanners.
Provides automatic updates at least every two weeks, or sooner for a critical vulnerability announcement.
Lets you manage and schedule scans across large enterprises with the SAINTmanager™ remote management console.

SAINTExploit

The SAINTexploit™ Penetration Testing Tool is the ultimate resource to demonstrate the security—or vulnerability—of your network. SAINTexploit goes beyond simply detecting vulnerabilities to safely exploiting them. The first integrated vulnerability and penetration testing tool, SAINTexploit is part of the complete solution SAINT offers to evaluate the vulnerabilities on your network.

Exploits vulnerabilities found by the SAINT vulnerability scanner.

Proves the existence of critical vulnerabilities.

Includes IPv4 and IPv6 exploits.

Features exploit tunneling that allows you to run penetration tests from an exploited target.

Features seamless integration with SAINT's GUI.

Boasts an extensive, multi-platform exploit library.

Includes remote, local, and client exploits.

Provides automatic penetration testing.

Runs individual exploits on demand.

Includes Web site emulator and e-mail forgery tool with built-in design templates.

STIGroup offers a full range of consulting services utilizing the SAINT vulnerability scanning and exploit testing solutions including alignment with regulatory compliance strategy, solution design, implementation, configuration baselining, and Managed Services. Our services can be leveraged specifically towards the implementation and/or management of SAINT Scanner or SAINT Exploit, or as a part of a larger Information Security initiative to accomplish a broader set of goals. To speak with us about SAINT Corporation products or to arrange for a pilot, call STIGroup Sales at Phone: +1-888-881-6661 extension 311 or contact STIGroup Sales via email.