Vex Auto Scanner Reimagined for Enhanced Usability

UBSECURE Inc. (Headquarters: Chuo-ku, Tokyo; President and CEO: Yoko Matsuda; hereinafter referred to as UBSECURE) has completely revamped the usability of the auto-scanner (automatic scanning) function for its vulnerability assessment tool "Vex." In addition to a new settings screen that can be selected according to user proficiency, a "Sitemap" function has been newly added to the auto-scanner, allowing users to visually grasp the structure of a website. This enables even first-time users of Vex Auto Scanner to easily start their own internal assessments and proceed while confirming for themselves any omissions in the scan.

Two Hurdles to In-House Vulnerability Assessment

While the trend of conducting vulnerability assessments continuously in-house is growing, there have been two main hurdles for practitioners. The first is the "difficulty of getting started," where users get stuck at the initial scan settings. The second is the anxiety that arises after running a scan, wondering "if all the necessary pages have truly been scanned." This revision directly addresses both of these issues.

Point 1: Easier to Start with Two Selectable Setting Methods

Settings Wizard (For First-Time Users) Settings can be completed by following the on-screen instructions step-by-step. Each step includes a detailed explanation, allowing users to start using the tool by simply following the screen, even without prior knowledge or assessment experience. It also enables the distribution of accounts to site administrators, allowing them to perform scans themselves, making it easier to expand the scope of internal assessment personnel.

Batch Settings Screen (For Experienced Users) Frequently used settings are consolidated on a single screen, allowing for completion in fewer steps. High-frequency items such as the starting URL, login, scan load, and schedule are placed prominently, while less frequent items are grouped under "Advanced Settings," enabling smooth completion of settings.

Pre-Scan Preparation Guide A checklist (in Excel format) summarizing the necessary preparation items before scanning, such as coordination with the site and stakeholders, can be downloaded from the top of the settings screen. This clarifies "what needs to be prepared" in advance, preventing rework.

In addition, the operability around settings has been reviewed, including changing the scan schedule adjustment to intuitive graphical operations and allowing free input of domains, which previously required pre-registration, directly from the settings screen.

Point 2: New "Sitemap" Function for Self-Verification of Omissions

In auto-scanners, "unscanned pages" can occur if pages are not scanned due to issues such as failure to release access restrictions on the website side or incorrect settings. Even if unscanned pages have vulnerabilities, the associated risks may go unnoticed. The newly added "Sitemap" function in the auto-scanner visually represents these omissions intuitively, enabling actions such as additional scans.

Understanding Error Pages Displays pages that returned an error during the scan. Quickly grasp pages that are likely unscanned and the pages beyond them.

Automatic Classification of Functional Groups AI analyzes the content of scanned pages and automatically classifies them by function. This allows for focused confirmation and makes it easier to grasp the overall structure even for large-scale sites with many pages.

Intuitive Grasp of Site Structure Displays scanned pages with screen captures, organized by path structure. This makes it easier to notice discrepancies like "a page that should be there is missing" and intuitively find unscanned pages.

Vex Auto Scanner: Easy to Start, Easy to Verify

With these revisions, Vex Auto Scanner has become an even more user-friendly tool, making it easy for those who are "new to assessments" to get started and allowing them to independently verify if their scans have any omissions. For companies considering in-house vulnerability assessments, Vex Auto Scanner is not just a "tool introduction" but a viable option for reliably conducting their own assessments.

For Those Who Want to Try It Out First

If you are considering introducing in-house assessments with Vex Auto Scanner, please take this opportunity to try it.

"Vex" Product Page

https://www.ubsecure.jp/vex