HackGATE data and insights

Features

Overflowing with useful features

Secure access & control

HackGATE is a gateway to control and connect ethical hackers with target systems securely by restricting access to authorized ethical hackers and approved methods. HackGATE integrates security features like Web Application Firewall, SSL offloading, and robust authentication/authorization for further protection.

Data management & reporting

HackGATE collects, stores, and analyzes various data, including security testing traffic, identified attack logs, and how thoroughly ethical hackers tested the web application. HackGATE generates reports that offer comprehensive insights for project management, compliance purposes, and improving future security assessments.

Capabilities

Core monitoring capabilities

Logging traffic

HackGATE saves all relevant data about pentesters involved in the pentest project. HackGATE is an enterprise-level monitoring appliance specifically tailored for ethical hacking projects. It analyzes the traffic to separate legitimate pentesting activities from real-world attacks.

Pentester activity

HackGATE offers comprehensive, real-time insights into pentester activity. It consolidates all pentest-related information and the nature of traffic sent to the web server, including testing duration, assets tested, the ratio of manual vs. automated testing, and the variety of techniques used based on OWASP guidelines.

Quality score

HackGATE provides a framework for assessing the quality of penetration testing activities without relying on the actual severity of the identified vulnerabilities. This assessment is based on various metrics and indicators that reflect the penetration testing process's thoroughness, coverage, and effectiveness.

Dashboard

Dashboard and custom reports

Configuration panel

This panel lets you take full control of your HackGATE settings, by easily managing target systems (including IP addresses or hostnames), configuring credentials, and adjusting billing details or plan options.

Pentest project management panel

This panel is for keeping your ethical hacking projects on track. The dashboard offers a clear overview of past, ongoing, and future projects, whether it's a penetration test or a bug bounty program.

Analytics panel

This section provides valuable insights into your ethical hacking activities, presenting collected data through interactive charts and tables. You can filter and drill down to specific details for a comprehensive understanding.

Ethical hacker panel

Ethical hackers working on your projects have their dedicated panel. This space provides them with a clear overview of the projects they're involved in, ensuring clear communication and streamlined workflows.

Reports

Customer overview

The platform stores personal and company-specific data, like members, company and web app URLs, current subscription plans, and HackGATE credits. Based on this information, it generates a detailed customer profile for the final report.

Pentest overview

The platform analyzes data related to security testing within a specific timeframe. The report generated provides an overview of the security testing traffic, including the most active ethical hackers and measurements of traffic timeline.

Identified attack types

The platform uitlizes third-party data analytics tool to identify attack types (a web application firewall’s log-only mode). The generated report provides a comprehensive list of identified attack types, such as the OWASP TOP 10.

Project management

The platform collects project-specific data, including the timeline of the project and the list of allowed ethical hackers to provide a complete picture of the website that was tested or is undergoing tests.

Comprehensiveness insights

HackGATE uses Spider to automate crawling and mapping websites. By comparing the analyzed traffic with Spider, it estimates the tested functionalities of the target web app. The report provides a comprehensive analysis of tested and untested functionalities.

Pentest quality score

Using specific parameters, such as project length, security testing traffic, identified attack types, and predefined algorithms to estimate the ratio between manual and automated testing, HackGATE estimates a quality score for the pentest, allowing for benchmarking against similar companies.