Astra Security

A critical SSRF vulnerability was uncovered in GitLab that potentially allowed hackers to steal passwords/cloud services credentials.

Astra's vulnerability scanner is now detecting this vulnerability 🙌

We're continuously adding new CVEs to the scanner and building intelligence :)

We're thrilled to introduce our shiny new Security Scan dashboard, which stands out with its sleek and modern design and new features 😃

With our dashboard officially rolled out, Vulnerability Assessment and Penetration Testing becomes more interactive than ever.

Announcement: https://www.getastra.com/blog/astra-product/introducing-our-new-security-scan-platform/

WP Hardening by Astra Security is a tool which performs a real-time security audit of your website to find missing security best practices. Using our ‘Security Fixer’ you can also fix these with a single click from your WordPress backend
It is a task to achieve the basic WordPress security measures without using multiple plugins. Ironically, using many plugins there is a higher chance of the site being compromised. Multiple plugins also ask for better maintenance, updates, which many webmasters failed to comply. WP Hardening plugin solves this problem and more.

WP Hardening is a one-stop solution to implement security recommendations for your WordPress website. It is effortless to use and works efficiently from your WordPress backend.

URL: https://wordpress.org/plugins/wp-security-hardening/

Super excited to launch our free remote security scanner!

URL: https://securityscan.getastra.com/

The scan does basic tests like:

1. Checking for HTTP headers
2. Cookie security
3. XSS protection headers
4. HTTP Strict Transport Security
5. Subresource Integrity (SRI)
6. X-Content-Type-Options

and about 100 more!

All this in a click of a button :D

Pandemic was just the acceleration that we needed. We decided to go full-remote post this.

Everyone in the team is glad as they can work from anywhere :)

We're glad because office operations sometimes end up squeezing too much out of you for things which aren't necessarily important for business.

All this while Ananda and I were in Paris, working as a two people team occasionally hiring freelancers for not-so-important tasks. We moved to New Delhi in April, 2018 and hired our first few people over the next few months.

We also setup our office :)

We applied for Techstars and got selected for their Berlin cohort! About 2-3 interviews and Techstars said that we're in :D

It was an amazing experience going through Techstars and building friendships with fellow founders that we still cherish.

Building security products can be hard, specially as first time founders with little experience building SaaS (leave along security SaaS, phew).

My co-founder Ananda and I made typical mistake engineers make - trying to build pixel perfect product and it seemed to take forever to build. Though, we got initial validations by customers liking the initial version even though it had bugs which we were quick to address and compensate via excellent support (in the words of customers).

We started by putting a lean beta page out trying to attract early adopters. There was absolutely zero traffic until one of our answers went viral (kinda) on Quora. We got about 600-700 beta sign-ups from Quora and a little social media marketing.