Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Thank you for your interest. The service focuses on fixing vulnerabilities in commonly used and popular software solutions such as WordPress, Drupal and Joomla. So, currently, we do not fix handwritten SQL injection vulnerabilities.

On a technical level it differs primarily on that it's not an external service that can only start responding after the website has been hacked; they treat the damage caused by a successful hack instead of preventing the hack in the first place. Because we can scan the code itself, we can actually patch vulnerabilities before they are being exploited. The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities.



"The beauty is in that we do not do "normal" updates but just patch the vulnerabilities in a non-obtrusive way, this prevents the website to fail because of incompatibilities"

Does this mean you're writing your own custom patches for every single versions of the software solutions you're supporting ?


> The service focuses on fixing vulnerabilities in commonly used and popular software solutions such as WordPress, Drupal and Joomla.

What does this mean? Can you perhaps explain the service? Are these patches based on Drupal/Joomla security releases?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: