wwdevries
Joined 15 years ago
Karma
182
Submissions
39
Member since
May 17
wwdevries.net
View on Hacker NewsRecent submissions
Comment · 11 years ago
Patchman | http://patchman.co | ONSITE or REMOTE | Enschede, The Netherlands
Our customers comprise of large web hosting providers all around the globe. Security is – obviously – extremely important to them. However, there’s one layer of the security stack they have little or no control over: the code of their end users. Most websites use standard software as a foundation. Did you know that about 30% of the web is running on WordPress, Joomla or Drupal? Hackers continuously exploit security vulnerabilities in these foundations to upload and execute malware. Effectively, this allows hackers to run any malicious code they want. For example: to send spam, launch DDoS attacks or inflict far worse damage.
Patchman comes to the rescue! We offer web hosting providers a fully automated SaaS solution to index security vulnerabilities/risks and resolve them by automatically applying safe backported patches and by defusing malware. On top of that, we offer a web app that helps all stakeholders (including security officers, system administrators, helpdesk employees and end users) to operate Patchman and keep the web secure.
We're currently hiring for three positions:
### Software Engineer: Threat Analysis & Response (PHP) ###
Info & apply: http://jobs.patchman.co/software-engineer-threat-analysis-re...
### Software Engineer: Back-end (Python/Django) ###
Info & apply: http://jobs.patchman.co/software-engineer-back-end
### Software Engineer: Linux Security R&D (C/C++) ###
Info & apply: http://jobs.patchman.co/software-engineer-linux-security-rd
Comment · 11 years ago
We run scheduled scans and very soon we'll be hooking into Apache, FTP, etc. But Patchman is actually preventing malware from being uploaded in the first place by fixing vulnerabilities before they get exploited.
Also, most malware is not executed right after uploading. They usually wait for the weekends.
Comment · 11 years ago
Founder here, let me know if you have any questions! Upvotes would naturally be greatly appreciated to get the word out in the US :-) Right now we mostly have large (and small) hosting providers in the EU as customers.
Comment · 11 years ago
E-mail me at wouter @ patchman . co
Would love to talk to you
Comment · 11 years ago
@switch33 No, our detection method is hash based. We also have on our roadmap to to content based scanning, that would indeed require un-obfiscating the code.
Comment · 11 years ago
Malware is by definition self contained and can simply be removed. We move the file to another directory, so it cannot be executed.
Regarding security vulnerabilities, we specifically patch only those vulnerabilities. This way you can be rest assured that your customer's websites continue to function properly.
Comment · 11 years ago
Hi, founder of Patchman here! Patchman was built for hosting providers as a tool to stop the endless stream of abuse. I'm happy to answer your questions!