How do I find custom sensitive content in a web assessment?
Holm Security allows you to scan for custom sensitive content during a web application assessment. You can define specific regular expressions to detect sensitive data such as personal ID numbers or credit card numbers.
Add custom sensitive content to a profile
-
Log in to your Security Center.
-
In the main navigation bar, hover over Assessments.
-
From the dropdown menu, select Profiles.
-
Select Web from the dropdown menu.
-
Edit an existing profile or create a new one.
-
Go to Sensitive content and scroll to the bottom of the page.
-
In the Custom content section, add the regular expression you want the assessment to search for.
-
Example:
(?:0[1-9]|[12]\d|3[01])(?:[04][1-9]|[15][0-2])\d{7}detects Norwegian personal identity numbers.
-
-
Press Enter to add the expression.
-
Click OK to save the settings.
Once configured, the scanner will look for matches to the defined regular expressions during the assessment.