beSTORM

beSTORM

Beyond Security (Fortra)
+
+

Related Products

  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website
  • cside
    37 Ratings
    Visit Website
  • ManageEngine ADManager Plus
    706 Ratings
    Visit Website
  • Cerberus FTP Server
    159 Ratings
    Visit Website
  • EasyDMARC
    291 Ratings
    Visit Website
  • Gaffa
    5 Ratings
    Visit Website
  • Letsignit
    272 Ratings
    Visit Website
  • Parasoft
    152 Ratings
    Visit Website
  • NINJIO
    416 Ratings
    Visit Website
  • QuantaStor
    6 Ratings
    Visit Website

About

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses. FuzzDB contains comprehensive lists of attack payload primitives for fault injection testing. These patterns, categorized by the attack and where appropriate platform type, are known to cause issues like OS command injection, directory listings, directory traversals, source exposure, file upload bypass, authentication bypass, XSS, HTTP header crlf injections, SQL injection, NoSQL injection, and more. For example, FuzzDB catalogs 56 patterns that can potentially be interpreted as a null byte and contains lists of commonly used methods and name-value pairs that trigger debug modes.

About

Discover code weaknesses and certify the security strength of any product without access to source code. Test any protocol or hardware with beSTORM, even those used in IoT, process control, CANbus compatible automotive and aerospace. Realtime fuzzing, doesn’t need access to the source code, no cases to download. One platform, one GUI to learn, with over 250+ prebuilt protocol testing modules and the ability to add custom and proprietary ones. Find the security weaknesses before deployment that are most often discovered by external actors after release. Certify vendor components and your own applications in your own testing center. Self-learning software module and propriety software testing. Customization and scalability for any business sizes up or down. Automatically generate and deliver near-infinite attack vectors and document any product failures. Record every pass/fail and hand engineering the exact command that produced each fail.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Not Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Anyone requiring a security scanner solution to test their application protocols

Audience

Cybersecurity staff requiring a tool to perform comprehensive, dynamic black box security testing

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Supported
Online Not Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

$50,000.00/one-time
Free Version Not Supported
Free Trial Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Not Supported
Webinars Not Supported
Live Online Supported
In Person Supported

Company Information

FuzzDB
github.com/fuzzdb-project/fuzzdb

Company Information

Beyond Security (Fortra)
Founded: 1999
United States
beyondsecurity.com/solutions/bestorm-dynamic-application-security-testing.html

Alternatives

Alternatives

API Fuzzer

API Fuzzer

Fuzzapi
Mayhem

Mayhem

ForAllSecure
NeoLoad

NeoLoad

Tricentis
CI Fuzz

CI Fuzz

Code Intelligence
go-fuzz

go-fuzz

dvyukov

Categories

Fuzz Testing Supported

Categories

Automated Testing Features

Hierarchical View Not Supported
Move & Copy Not Supported
Parameterized Testing Not Supported
Requirements-Based Testing Not Supported
Security Testing Supported
Supports Parallel Execution Not Supported
Test Script Reviews Not Supported
Unicode Compliance Not Supported

Integrations

BlackArch Linux Supported
NoSQL Supported
OWASP ZAP Supported

Integrations

BlackArch Linux Not Supported
NoSQL Not Supported
OWASP ZAP Not Supported
Claim FuzzDB and update features and information
Claim FuzzDB and update features and information
Claim beSTORM and update features and information
Claim beSTORM and update features and information