Data Fidelity has made available their E-Book online which can be accessed here. 

READ NOW

For WordPress websites, Data Fidelity uses the WordFence application to actively monitor all hosted sites. 

WordFence is a global network of apps running as an endpoint firewall, operating synchronously with real-time reporting available. 

WordFence adopts a proactive approach to site security and potential security flaws by recording any breaches across the global wordfence network, and automatically providing patch updates once a new cyber threat to WordPress sites has been identified. 

In addition to this, Wordfence also provides Geoblocking either by individual IP address, country or region, to prevent unwanted traffic from other countries if required, and logs all successful site logins with both the IP address, and the username. 

Data Fidelity receives weekly security audits for all hosted sites containins potential security flaws, which are immediately patched and updated.

Website/Web app Blacklisting/Whitelisting is a very powerful tool when operating a Database containing potentially sensitive, critical information. 

Whitelisting is the process of filtering only specific IP addresses (Or MAC addresses for very secure, tightened security to an extreme point). 

Blacklisting is preventing access to a network based on IP address.

Whitelisting is recommended for internal use database development and systems, as whitelisting prevents all access other than those whitelisted IP addresses; Blacklisting is recommended for specific security needs for a publicly available database as it will allow open access other than those blacklisted. 

For Database development, Data Fidelity always recommends conducting a Penetration test. 

A Pen Test is an attempt to ‘hack’ a network, or device, containing the sensitive data; The purpose of the pen test is to identify any potential weaknesses in the network or device, and then reporting on the findings to make recommendations to improve security. 

We use  a series of tools for pen testing: 

• Kali Linux, has all pen testing tools pre-installed. We run Kali Linux in a Virtual Machine to conduct pen testing. 
• WPscan is a scanning tool which has the ability to scan a website to be built with WordPress, and if so, provides a report on outdated and insecure plugins, database configurations or scripts. 
• NMap, although not built specifically for pen testing, does provide the ability to scan a network and all ports on the network, to identify any open ports which can potentially provide a means of breaching a network by open network port.
• Metasploit is a comprehensive framework of known system vulnerabilities which once access to a network has been made, can scan all connected devices, identify their operating systems, build numbers and provide a report on all known weaknesses across all network connected devices. Metasploit then has the ability to deliver a payload to a victim device. 

Although Data Fidelity uses comprehensive pen testing tools, we always recommend using best-practice when using any network or computer devices; The largest cause of successful network breaches is human error resulting from weak passwords that are easily guessed, phishing attempts or lack of physical security around a server (no lockable doors). 

Database Development should always be done in conjunction with best practice, and kept secure; Databases almost always contain sensitive information such as credit cards, addresses, emails, phone numbers and other personal identifying information for our clients, or their own clients, and we always take Database security very seriously. 

Automated patch updates are a tool that Data Fidelity uses to automatically update all website extensions, server tools and plugins to the latest version; As this is automated, it prevents any lapse in time between when a system has become vulnerable to when patches are installed.