Why Cloud Security?
Kyplex is a cloud security vendor because the company's services are provided over the Internet. You do not need to install anything on your website to check it with Kyplex security or malware scanners or use Kyplex Snapshot to backup your website and database.
In addition we scan websites using our distributed scanner engine, which detects if websites are resilient to a flood of requests. If the website starts to block our probbing requests, that website will be scanned using anoter node in Kyplex network of scanner nodes. This is something that you cannot do with regular web security scanner installed as local application on your local computer.
When performing security assessment, the connection with the remote host can be lost permanently or for a period of time. To solve this problem, Kyplex automatically redirects that scanning job to a different server in the Kyplex private cloud. The other server will continue the scanning process without losing current status. In the next image you can see this process.
Connection with the scanned website can be lost due to a number of reasons:
- Some website these days are protected using different web application firewalls (WAF). If this WAF solution detects a number of assessment attacks coming from the Kyplex server, the original IP can be blocked after a few attempts.
- Some web applications have built-in flood protection. For example Joomla CMS has one. If the number of requests coming from the same IP is too big, thas IP will be blocked.
- Hosting companies may be running network Intrusion Prevention Systems (IPS). If an IPS solution detects that a port scan is coming from Kyplex IP address, that IP might be blocked.
The above list is not comprehensive. What is important to realize is that our system is built in a way that allows to continue scanning in case one of our IP addresses is blocked.
