Monday, November 26, 2007

Plynt ( B+ )

Plynt (http://www.plynt.com) is an information security company who's single service offering is Web Application Penetration Tests. Plynt's services are driven by automated tools or scanners which produce high level results that are then handed off to professional Web Application testers. This type of testing is something that we'd like to see more often as nothing is more accurate and capable than the human element.

With that said, we do have a few negative things to say about Plynt's website. The first issue that we have is with their terminology. Plynt uses the term "Penetration Test" to describe its services when its services would be best described as "Web Application Security Assessment" services. Penetration Testing services usually refer to Network penetration testing services and are usually different than Web Application services. Plynt is not wrong, but they could do a better job at clearly defining their offering with a better name.

The one point where we feel that Plynt is wrong is where they guarantee absolute security. Plynt might be good at doing what they do, but anyone who guarantee's absolute security is making empty promises. It is technically impossible to find all security vulnerabilities in a particular web application especially since new methods of attack are constantly being developed.

It is important to note that Plynt is a specialized company in that they do not offer network security services. While they appear to be good at helping people harden their web applications, we're certain that they would not be the right choice for a business that wants to harden its entire IT infrastructure. If you're looking for a company with deep talent in all aspects of information security then Plynt is not your choice. If you're looking for a company that specializes in Web Application Security, then we're confident that Plynt will do a good job.

All in all, we're going to give Plynt a moderate review. We don't like the fact that they are making empty promises and we don't like the fact that they are using unclear terminology. With that said, they are focused and are offering human driven services. We give Plynt a Moderate Recommendation.

Score Card (Click to Enlarge)

0 comments: