Why Cloud Security?

Kyplex's cloud-based services are provided over the Internet. This means that you don't need to install anything on your website to check it with Kyplex security or malware scanners, or to use Kyplex Snapshot to backup your website and database.

In addition we scan websites using our distributed scanner engine, which detects if websites are resilient to a flood of requests. If the website starts to block our probbing requests, that website will be scanned using anoter node in Kyplex network of scanner nodes. This is something that you cannot do with regular web security scanner installed as local application on your local computer.

Kyplex scans websites with our unique distributed scanning engine, which detects if websites are resilient to a flood of requests. If the website starts to block our probing requests, it will be scanned by another server in Kyplex's network of scanner nodes. This is something that you cannot do with a regular web security scanner that is installed as an application on your host computer.

When performing a security assessment, the connection with the website host can be lost permanently, or for a period of time. To solve this problem, Kyplex automatically redirects the assessment process to a different server in Kyplex's private cloud. The other server will continue the scanning process without losing track of the current status. This process is illustrated in the image below.

kyplex web security cloud service
 

The connection with the scanned website can be lost due to a number of reasons:

  • Today, some websites are protected using Web Application Firewalls (WAFs). If the WAF detects a number of assessment attacks coming from the Kyplex server, the original server IP can be blocked after a few attempts.
  • Some web applications have built-in flood protection. For example, the Joomla CMS has one. If the number of requests coming from the same IP address is too high, that IP address will be blocked.
  • Hosting companies may be running network Intrusion Prevention Systems (IPSs). If an IPS detects that a port scan is coming from a single IP address, that IP address might be blocked.

The above list is not comprehensive. What is important to realize is that our system is built in a way that allows Kyplex to continue scanning in the event that one of our IP addresses is blocked.