Nope, we work with hosts that do exactly that. Patch and update if it is outdated, fix if it is broken and even remove any malware if it is infected.
Again, what you guys are doing is great, and I don't want to take that way. My only point is that you were not the first and some have been doing that for a while.
That's a good approach, but not novel and not the first host doing that.
Many hosts automatically scan and fix their clients sites and have been doing that for a while. Specially when you are talking about popular CMSs like WorPress, Joomla and drupal.
Another issue we identified is that you can find those "hidden" admin panel or URLs that shouldn't be known to the outside, by just refreshing the page a few times and checking all requests.
It is not a best practice, but some companies do and it makes easier for those to be found.
"
Sucuri is looking for a Senior PHP Developer with JavaScript & AJAX chops to join our team, and help us continue building the most polished and reliable website malware scanning and cleanup engine in the world.
This developer would be responsible for creating new enhancements as well as improving existing functionality within a high-load, high-availability, distributed environment. "
-Direct engagement with the research team to expand our engine
-Queue wrangler, engaging with Junior staff and streamlining processes
As you might imagine, its not all unicorns and rainbows we’re looking for a technical type and specifically someone with the following traits:
-Advanced Linux experience – CLI
-Server hardening and security experience (using firewalls, NIDs, HIDs, etc)
-Experience with log analysis, malware analysis or forensics a big plus
-System administration experience with WordPress, Joomla, ,etc osCommerce or other CMSs
-Shell scripting required
-PHP and C coding experience useful, but not required.
-Open source and community participation and contributions a plus
*We love to see active community engagement. If you’re already assisting on forums (WordPress.org, open source project, github, stackoverflow, stopbadware) please include your account name as a reference
REMOTE - Sucuri (sucuri.net): Junior (Security) Support analyst:
Description: As a Junior Support Analyst you will be required to troubleshoot web site security issues (learn to fix them), analyse and decode malware, patiently engage with clients, and learn a lot about security :)
We employ manual and automated techniques to analyze, decode, and fix web-based malware. The right candidate will have the opportunity to learn and apply these techniques in their day-to-day duties. If you like the challenge of fixing broken websites and reversing the effects of malware, then you’ll love this job.
Looking for a junior system admin (or op dev) to help us out.
If you love web security, love learning new tools and have already some experience with Linux, WordPress, Joomla, managing sites, etc, email me [email protected].
Looking for a junior system admin (or op dev) to help us out.
If you love web security, love learning new tools and have already some experience with Linux, WordPress, Joomla, managing sites, etc, email me [email protected].