Security audit on servers, good idea???
 

Do you guys every get these done to see how the company is doing?

almost every adult sites will fail them :P

gotta do them. They suck, expensive. But it speeds up your box. Hard to find a competent white hat.

I have some guys from India who will do it.

buy Retina Network Audit, Scan your network daily and a good admin system for your server, if i remember right cpanels admin lets you install server updates.. not to hard..

Of course its a good idea, don't go with some company thats just going to scan your box for common vulns and call it a day. Find a company that will go in and do some hardcore penetration testing if you are serious.

I have nothing negative to say about Retina, but its only great if you have already spent the money on a good audit of your network, updated all the vendor software to the latest secure build, and patched the vulnerabilities.

Anything less, and you are wasting your time and hard earned money. If you want some leads on getting a 'Fortune 100' security audit at 'Inc. 500' prices, drop me a note in ICQ, I have a number of security consultants that I can recommend that will allow you to sleep well at night knowing they're discovering potential security exposures well before the unauthorized third-parties do. :thumbsup