Skip to content

Safetica is using OKRs to support rapid growth

Objectives and Key Results (OKRs) is a trending methodology for collaborative goal-setting invented by Andy Grove (Intel) and made famous by Google, which still uses it today. Companies implement OKRs primarily to execute their strategy, communicate what their top priorities are, and align teams and individuals on what is most important. Read how we use OKRs to grow our business at Safetica. 

Why OKRs at Safetica?

When Richard Brulik joined Safetica as the new CEO in 2020, he first used the term OKRs during one of our management meetings: “We should use OKRs to execute, communicate and measure the success of our strategy.” Execution, communication and measurement of our success became the focus of our work with OKRs. The other benefits we were looking for were alignment, growth, increased transparency, and better cross-functional collaboration. 

What Do OKRs Bring Us?

After 3 quarters of running OKRs, we did an evaluation of realized OKRs benefits (the solid color) and benefits employees would like to see in the future (the lighter color). Alignment, Transparency, and Track Progress to Goals were desired and mostly realized benefits in our org. The focus was also rated highly but there was a gap indicating that some people would like to get an even better focus. And the biggest gap was for sure in Cross-team Cooperation. 


OKRs help us grow, shine a spotlight, and align everyone with the top priorities of our business. 

    How Do We Use OKRs?

      We set OKRs based on a strategy that aligns with our vision and mission. From the strategy, we define a set of company-wide OKRs that are typically set for 1 year. These company OKRs represent our top priorities for the year and define how we will measure our success. At the next level, we invite key contributors and set Shared or Team OKRs that align with the company-wide OKRs. OKRs on the second level are typically set for a quarter. OKRs are here to help our company fulfill its mission while staying aligned with the vision and our core values as demonstrated in the picture below. 


      We have weekly check-ins where we discuss the current results, roadblocks, and what we can do to improve the results. At the end of each quarter, we close the OKRs, do a review & retrospective, share the results, and set new OKRs for the upcoming quarter. These routines are the heartbeat of our OKR system and allow us to learn rapidly.

      And What Are the 2022 Safetica OKRs?

      To better illustrate how we work with OKRs, here are examples of our company-wide OKRs for 2022. Check out our main goals for this year!

      • Double the efficiency of the entire Safetica ONE customer journey: The goal is to bring the best customer experience possible at all stages of the customer journey, and make our customers successful.
      • Rapid growth by mastering the best practices of SaaS: We want to make excellent data protection easy with our new SaaS solution Safetica NXT.
      • Safetica is the top Czech-based company in which to grow: The aim is to let our employees grow; this objective focuses on employee satisfaction and growth index.


      And what have we learned by implementing and using OKRs? I have shared our experiences and tips for a successful implementation in this article. OKRs themselves are simple but accomplishing them is not easy. It is about changing the mindset, not being afraid to fail, and most importantly, to learn and improve. 

      About Version 2 Digital

      Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

      Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

      About Safetica
      Safetica is to provide small and mid-sized companies with the same quality data protection that corporations have – affordably, and without any additional IT administration or disruptions in operation.

      Keepit Secures Debt from Silicon Valley Bank in Partnership with Vækstfonden to Fuel Growth


      Funding to support fast growth into new markets and hiring talent
      London – 9 June 2022 – Silicon Valley Bank, the financial partner of the innovation economy, has provided a $22.5 million debt financing package to Keepit in partnership with Vaekstfonden. The fresh capital will help fuel further international expansion, hiring, and product development as it continues to scale and build out its market-leading platform for SaaS data protection.

      Keepit will use the capital for strategic growth purposes, extend its cash runway ahead of future rounds, and minimize dilution during this strategic growth phase. Keepit will use the debt facilities to support the creation of new services and capabilities as well as new roles within the organization as it grows internationally and adds further market-leading functionality to its product offering.

      Founded in 2007 in Copenhagen, Denmark, Keepit is a leader in cloud backup and recovery and the world’s only independent, vendor-neutral cloud dedicated to SaaS data protection with a blockchain-verified solution being sold worldwide. The financing from Silicon Valley Bank follows Keepit’s $30 million Series A funding round in 2020.

      Frederik Schouboe, CEO and co-founder of Keepit, commented:

      “The support from Silicon Valley Bank and Vaekstfonden is a testament to the strength of our business. The strides we have made in the sector have placed Keepit as a market leader. This additional funding now enables us to accelerate our key strategic plans to help fuel the next phase of growth for Keepit.”

      Sebastian Penn, Managing Director of Silicon Valley Bank, Denmark, commented:

      “Silicon Valley Bank is delighted to extend its partnership with the outstanding team at Keepit. It is great to see further funding within the Danish innovation economy and Keepit is innovating to support the growth of the broader SaaS ecosystem. We look forward to watching the team continue to grow, build, and scale globally.”

      About Version 2 Digital

      Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

      Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

      About Keepit
      At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.


      About Silicon Valley Bank
      Silicon Valley Bank, the bank of the world’s most innovative companies and investors, provides commercial banking services, expertise and insights to the technology, life science and healthcare, private equity and venture capital firms.

      Silicon Valley Bank operates in centers of innovation around the world and is one of SVB’s core businesses. With global commercial banking services, Silicon Valley Bank helps address the unique needs of its dynamic, fast-growing, innovative clients.
      Visit Silicon Valley Bank’s website to learn more.

      Silicon Valley Bank is registered in England and Wales at Alphabeta, 14-18 Finsbury Square, London EC2A 1BR, UK under No. FC029579. Silicon Valley Bank is authorized and regulated by the California Department of Financial Protection and Innovation (DFPI) and the United States Federal Reserve Bank; authorized by the Prudential Regulation Authority with number 577295; and subject to regulation by the Financial Conduct Authority and limited regulation by the Prudential Regulation Authority. Details about the extent of our regulation by the Prudential Regulation Authority are available from us on request. © 2022 SVB Financial Group. All rights reserved. SVB, SVB FINANCIAL GROUP, SILICON VALLEY BANK, MAKE NEXT HAPPEN NOW and the chevron device are trademarks of SVB Financial Group, used under license.

      Why Backup and Recovery for Salesforce – Do You Need It?

      Introduction

      Salesforce is the undisputed market leader when it comes to customer relationship management (CRM) platforms, with a 23.9% market share, as per IDC (figure below).

      More than 150,000 companies across the globe trust Salesforce for managing their data ecosystems – doing everything from gathering and converting leads to opportunities, managing information to understand and engage customers, extracting insights from the data, to sharing information across the organization.

      It’s clear that Salesforce is very much at the heart of your value chain, but how safe is the most important asset of your organization, your data? Let’s explore this question.

      How Effective Is Native Salesforce Backup and Recovery Service?

      According to industry analysts (and even a Salesforce best-practices blog), using the native backup and recovery capabilities can have the following drawbacks:

      • It takes 6 to 8 weeks for data backup recovery time objective (RTO)
      • Salesforce Data Recovery Service is very expensive, costing $10,000 per restore per organization
      • Backup does not cover vital Salesforce metadata. You’ll miss out on custom fields, page layouts, reports, dashboards, and custom code backup.
      • Salesforce ended its Data Recovery Service in July 2020, citing quality issues, but it was revived in March 2021 after customers demanded a native backup service.
      • Salesforce suggests using third-party backups as part of the data backup strategy.

      Why Do You Need Third-Party Backup?

      In addition to the drawbacks above, there are many reasons why Salesforce data should be backed up with a third-party backup and recovery solution. Let us explore some of the main reasons:

      1. Salesforce recommends it:

        “There are a number of data backup solutions offered by our partners on our AppExchange. Some of these are more comprehensive in that they allow you to automate backups of both your data AND your metadata and provide a mechanism by which to restore that data easily. You can search for these by visiting the AppExchange directly and searching for keyword backup. We recommend that customers vet multiple offerings and audit the reviews provided by other customers before selecting one of these offerings.”
      2. Accidental deletion

        Consider this statement directly from Salesforce best practices to back up data:

        “Even with the best of intentions, users and administrators have been in situations where they have either deleted large amounts of data, or have modified records, only to later realize that a mistake was made. With tools like the Data Loader, it is very easy to mass delete or update records. And a simple mistake in your source file or field mapping could spell disaster for your data. It is recommended that you keep a regular backup of your data and to do a manual point-in-time backup before you proceed with any major data project within your organization.”

        Accidental deletion remains the top cause of Salesforce data loss, leading to nearly 70% of the data loss incidents.
      3. Cybersecurity attacks

        Being at the heart of the value chain and hosting huge volumes of sensitive customer data, Salesforce is a prime target for cybersecurity attacks.

        Unfortunately, in 2019, a cloud-based e-commerce platform and children’s clothing company, Hanna Andersson, had its data exposed due to a malware that infiltrated Salesforce. The breach compromised a considerable chunk of customer data, including credit card information and personal identifiers. The hackers gathered data from about 10,000 consumers nationwide and sold it to criminals on the dark web.

        Bearing the sophistication of cyberattacks in mind, it is important to consider what the impact of a security breach is on your organization, and what your data protection plan is to mitigate these attacks.

        A third-party cloud backup is a key component of data protection best practices. With reliable backups and quick recovery in case of a disaster, you will not only have peace of mind that you can recover data (and metadata) when you need it, but also that you maintain data compliance.
      4. Unpredictable (and high) costs

        Professional service costs are high, as high as $10,000 per restore, per organization. A third-party backup provider can offer superior services for a predictable, all-inclusive price per user, per month.
      5. Limited data backup retention period

        Is your customer data part of your long-term strategy? Salesforce backup is limited to a maximum retention period of 90 days. In contrast, a third-party backup provider can provide the flexibility to retain data, from one year and up to 99 years.
      6. The infrequency of backups and lacking automation

        Salesforce Data Export Service allows you to back up every seven days (or 29 days, depending on the Salesforce edition). Additionally, datasets greater than 512 MB are exported into multiple zip files.

        When compared to this, a third-party backup provider offers you complete, automated daily backups with data and metadata in a time- and user-friendly fashion. Further, they provide tracking and monitoring of the latest backup and your backup history.
      7. Lackluster user experience and poor recovery options

        When you need to recover objects, dealing manually with multiple 512 MB zip files is resource intensive. A third-party backup can provide you with these additional features:
      • Drill down to specific objects
      • A search option to instantly search and recover deleted or modified data
      • Granular restore
      • Compare and restore metadata
      • Restore permanently deleted records
      • Navigate snapshots of previous data versions and recover

      Ultimately, as an IT Leader, it comes down to data protection and data availability. Can your business afford to lose mission-critical data for 6 to 8 weeks? Can your budget handle unpredictable costs up to $10,000? Can you perform time consuming, manual reconfigurations due to loss of metadata with Salesforce backup?

      Instead of worrying about when data loss will happen, by using a third-party backup provider, you can recover data and metadata in minutes – at a predictable price point – regardless of what happens.

      Keepit Backup and Recovery for Salesforce

      Keepit for Salesforce saves you time, is cost effective, scalable, provides ease-of-use through a simple user interface, and gives you peace of mind that your data is securely backed up, recoverable, and available whenever you need it. With Keepit, we ensure this through:

      • Automated daily backups every 12 hours
      • Easy user interface which is clutter-free, intuitive, and increases productivity
      • Set and forget operation – set up in a few clicks and the backup will be running in the background
      • Unlimited storage and archiving at no extra charge
      • Technology scalable to millions of users with long backup retention from 12 months to unlimited
      • Point-in-time restores
      • Blockchain-verified technology for protecting your data
      • World-class security with dual data centers and 4 copies of data in private data centers

      Keepit for Salesforce saves you time, is cost effective, scalable, easy to use through a simple user interface, and gives you peace of mind that your data is securely backed up, recoverable, and available whenever you need it. With Keepit, we ensure this through:

      • Automated daily backups every 12 hours
      • Easy user interface which is clutter-free, intuitive, and increases productivity
      • Set and forget operation – set up in a few clicks and the backup will be running in the background
      • Unlimited storage and archiving at no extra charge
      • Technology scalable to millions of users with long backup retention from 12 months to unlimited
      • Point-in-time restores
      • Blockchain-verified technology for protecting your data
      • World-class security with dual data centers and 4 copies of data in private data centers

      About Version 2 Digital

      Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

      Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

      About Keepit
      At Keepit, we believe in a digital future where all software is delivered as a service. Keepit’s mission is to protect data in the cloud Keepit is a software company specializing in Cloud-to-Cloud data backup and recovery. Deriving from +20 year experience in building best-in-class data protection and hosting services, Keepit is pioneering the way to secure and protect cloud data at scale.

      How Organizations Can Properly Secure Network Access for Remote Workforces

      IT security policies have traditionally been perimeter-based, primarily concerned with the network activity within their own office and corporate network. While remote work certainly existed before, it has now become a standard – even an expectation among employees – no matter the industry or job function.

      This rapid expansion of remote workforces has created significant operational and cultural changes for companies worldwide – particularly when it comes to IT and securing corporate digital eco-systems. Many organizations were not fully prepared for such an immense transition of expanding corporate edges and countless new endpoints.

      With so many workers now scattered beyond the walls of their physical offices, this has created a considerable challenge for IT departments that find themselves struggling to monitor and gauge the real security posture of their networks, and the endpoints in use across them. The weakest link is no longer in the cubicle next to you – it can be halfway around the world in the home office of an employee using a VPN on a compromised laptop.

      Secure Network Access for Remote Workers: Challenges Today

      There are numerous potential risks for companies when it comes to enabling secure network access for remote workforces:

      • Limited Network & Endpoint Visibility: Remote work environments can make it considerably more difficult for an organization to maintain visibility and control over the data security of its employees. A lack of visibility inhibits IT and security teams from achieving operational and security objectives, while putting the business at increased risk.
      • Increased BYOD Use: An increasing number of employees these days use personal devices to access company networks. This is especially true as employees find themselves working from home with greater regularity. In many cases, these devices are often not fully compliant with their employer’s security policies. Unsecured personal devices can provide potential attack vectors for cybercriminals to target a corporate network.
      • Social Engineering Attacks: As organizations have bolstered their cybersecurity measures over time, tit has become more difficult for cybercriminals to exploit security posture vulnerabilities. In turn, many have favored more cost-effective tactics to breach networks like phishing emails that capitalize on human error and trust. Social engineering tactics need only an unwitting or distracted employee to succeed, and therefore typically require less technical knowledge to pull off.

      What’s Needed to Secure Network Access for Remote Workers

      Here are some critical considerations when it comes to enabling secure network access for remote workers:

      • Firewall: Serving as somewhat of an electric fence to your network, firewalls remain a basic but essential extra layer of protection for remote workers. One pitfall is that many employees may disable their firewall if they believe it to be slowing down their device, keeping it from blocking malicious traffic.
      • Antivirus: A just as essential, yet often forgone staple in your security stack is antivirus software. In addition to providing protection from all sorts of malware, the Next-Generation Antivirus (NGAV) of today utilizes predictive analytics driven by AI and machine learning for advanced threat detection. This includes determining root causes from endpoint data and responding to previously undetected emerging threats.
      • Managing Endpoint Visibility: Unmonitored remote devices can bring an abundance of potential threats to a network if they are not up-to-date and properly configured. Visibility is a key issue here. By implementing solutions like NAC, companies gain insight into every user and device on their network, allowing them to pinpoint any weaknesses within it. With this visibility they can then control, adjust, or deny access for any device as needed.
      • VPN: While it’s common for many companies to offer secured VPN connections for remote employees, VPN can’t serve as a comprehensive security solution. A VPN alone can leave you in the dark about the security posture and compliance level of the device connecting to it. You could unknowingly be giving safe passage for a compromised device directly to your network.
      • Device Risk Monitoring & Mitigation: With the help of an agent or MDM, NAC solutions like Portnox CLEAR can work alongside a VPN, offering two factor authentication based on user identity and endpoint risk score. Continuous monitoring is key here for keeping countless users and devices in compliance, no matter their location. By knowing the security posture of remote devices, IT teams can adjust their security policy and mitigate potential threats.
      • Employee Training & Awareness: Employees are more likely to be lax with their security habits outside the office, and cybercriminals are no stranger to this reality. Maintaining employee awareness of these potential threats is key for risk mitigation. Whether regarding proper password management, compliance policies, or how to spot phishing attempts, it’s highly beneficial to offer employee education and training in security best practices.

      About Version 2 Digital

      Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

      Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

      About Portnox
      Portnox provides simple-to-deploy, operate and maintain network access control, security and visibility solutions. Portnox software can be deployed on-premises, as a cloud-delivered service, or in hybrid mode. It is agentless and vendor-agnostic, allowing organizations to maximize their existing network and cybersecurity investments. Hundreds of enterprises around the world rely on Portnox for network visibility, cybersecurity policy enforcement and regulatory compliance. The company has been recognized for its innovations by Info Security Products Guide, Cyber Security Excellence Awards, IoT Innovator Awards, Computing Security Awards, Best of Interop ITX and Cyber Defense Magazine. Portnox has offices in the U.S., Europe and Asia. For information visit http://www.portnox.com, and follow us on Twitter and LinkedIn.。

      OSINT Tools – Pt.3

      Intro

      Now that we’ve laid some theoretical foundation as to what OSINT consists of, let’s check out some tools and see how they can benefit us, as well as what are some of the most common uses. Before going any further, we would just like to quickly go over what types of information gathering there are, as well as some distinctions when it comes to these tools.

      Active vs. Passive Recon

      Within the context of an investigation, be it a penetration test or due diligence, we will use OSINT to gather some information.

      The main distinction to be made here is active versus passive reconnaissance. Active reconnaissance means we are making some sort of a contact with a system we’re investigating. We interact with said systems. Some can be almost harmless, like ping, but some are much more intrusive, and can even mean brute forcing, and other such probing – which might be seen as hacking regardless of the fact that the resources are indeed in the open.

      In general, in such a way we also might leave traces in the form of logs – which can further show the length of the connection, our IP address, etc.

      When we are doing passive reconnaissance, we are not interacting with the systems. We might look up our target on Shodan, which would be considered passive, since we’re just using data that’s already out there, and are in no way interacting with any of the systems of interest.

      There are merits to both sides, however, it’s crucial that we are aware of the distinction, so as to not hinder our investigation – we need to know what to use, and when.

      Types of OSINT Tools

      Based on what the tool does, we can say there are three main categories:

      • Aggregation Tools
      • Discovery Tools
      • Scraping Tools

      Discovery Tools – tools that enable us to query and search the data that is already out there. The best example is Google search engine. Seemingly simple, but Google has a lot of websites indexed and crawled, which in turn gives us enormous potential when it comes to discovering new information. Another example would be Shodan.

      Aggregation Tools – these tools help us connect the dots, so to speak, once we have gathered all of our relevant data and are in need of further relating it, and compiling it into a functional, easily digestible, format.

      Scraping Tools – when we have successfully discovered the information we need, we would like to extract it in an easy and safe way. With these tools, we can avoid extracting anything that is of no use to us, as well as saving our precious resources e.g. time and bandwidth.

      With all of that being said, there are a plethora of tools out there, but we have decided to give a brief overview of a few that we felt are the most essential ones. It’s up to you to establish your own methodology, and do research accordingly, as there is no exact path one would follow when conducting OSINT investigations.

      Google Search Engine – Google Dorking

      Beside your everyday uses of Google’s search engine, there’s a lot of options for you to refine your queries.

      A simplest example is adding quotation marks to your search. By doing so, Google will interpret whatever we’ve put inside the quotation marks as an exact phrase, and will give us only the results where that exact phrase comes up.

      Another common example is adding the term site to our search. If we wanted to search for let’s say imdb new movies we would get something like this… notice the number of results.

      On the other hand, if we were to add site: to our search, we would get a result similar to this…

      As we can see, there’s a drastic difference in the number of results obtained, just by leveraging one of the many Google dorks.

      We can even look for specific filetypes, with the filetype keyword.

      If we want to look for publicly available .pdf’s for example, we can add the keyword like this:

      We can also say intitle – and Google will return results if the exact phrase appears in the title of the page; there’s cache too – which will give us Google’s cached version of the URL that we’ve specified.

      There are many more dorks available, and this is a big topic which we will look to cover in an article dedicated just to Google dorking.

      But for now, we’d like to mention that this is completely legal as we are querying against legal, publicly available information. Of course, be mindful that what you do with the information might not be legal.




      Shodan.io


      With Internet connected devices number being higher than ever, a search engine dedicated to IoT – Internet of Things – Shodan is an irreplaceable tool to have in your arsenal.

      If, for example, publicly accessible CCTV cameras are something that you might be looking into, Shodan’s got you covered.

      Heck, if you want to check if your smart fridge is publicly accessible, Shodan can help you!

      To use Shodan fully, you’ll need a paid subscription, however you might start with the free tier – but you’ll only get a limited amount of searches.

      Best free(mium) alternative to Shodan is Censys which also tries to discover, analyze, and monitor Internet accessible devices.


      OSINT Framework

      The OSINT Framework is one of the most popular OSINT tools out there, and rightly so. Structured like a web directory of tools, it has almost everything you might need for your investigation, which makes it an extremely attractive option for information gathering.

      Also, most of the tools in this web directory are directly usable and accessible through a browser, which is a great thing to have, since almost all of the best OSINT tools are created for Linux. Thus, the OSINT Framework provides us with a very useful and accessible bundle of tools, regardless of the platform – which is extremely valuable.

      It is worth noting that most of the tools found within are free, with only a minority being premium, subscription based tools.





      Maltego

      Maltego is a wonderful aggregator of interfaces to various OSINT databases – from the official Maltego website – https://www.maltego.com/.

      With Maltego, we can investigate and find information on organizations, individuals, as well as investigate cryptocurrencies, and much, much, more.

      Once registered (which can be done for free – as a part of community license) you are brought to a GUI from which you can start your investigation. Results of your queries (Maltego calls them transforms) are displayed in a beautiful bubble graph, which maps the relations between your nodes.

       

      Maltego starting screen

      In our example search, where we’ve chosen Domain as Maltego entity, for youtube.com, we’ve obtained the following:

      As we can see from the image, on the bottom are the transforms that were run, and on our graph we see color-coded results of our query. We’ve got 148 entities, and some of those include MX and NS records, email addresses, people, phone numbers, emails, etc.

      We just ran the all transforms search, of course, in reality we would maybe use only transforms that we need, or we would install specific modules (from Maltego starting page), so that we can query for information that’s relevant for our investigation. Some of the modules that we can install are paid, but there are also some good free ones.

      Maltego definitely warrants an article of its own, but we wanted to briefly show what this awesome tool is all about. Oh, and one more thing – Maltego runs on Linux, Windows, and MacOS.

      Recon-ng

      Another great tool is Recon-ng. This is a completely free, open source, CLI tool made for web-based open source reconnaissance.

      It is completely modular, it has its own default modules that are also open source, while also having a marketplace from which we can further enrich it with whatever we might need.

      The information we collect with it is stored in a database, which means we can use it to generate custom reports, if that’s something we need.

      Being an open source tool, it grows through its developer community, which is quite engaged.

      It might be a bit daunting at first, due to it being a CLI-based tool, but it is actually extremely fun to navigate around, and once you’ve gotten the hang of it you will surely love it!

      Conclusion

      These are some our favorite tools, and we’ve given you a brief introduction on them; in the future, we hope to expand on them (ideally all the tools mentioned here, and more!) – if that doesn’t prove to be possible for us, we hope that we’ve at least managed to provide a ‘teaser’ of sorts, and that we’ve managed to pique your interest.

      Lastly, honorable mentions go to TinEye – a reverse image search tool, and Phoneinfoga – Python-based phone number scanning tool.

      About Version 2 Digital

      Version 2 Digital is one of the most dynamic IT companies in Asia. The company distributes a wide range of IT products across various areas including cyber security, cloud, data protection, end points, infrastructures, system monitoring, storage, networking, business productivity and communication products.

      Through an extensive network of channels, point of sales, resellers, and partnership companies, Version 2 offers quality products and services which are highly acclaimed in the market. Its customers cover a wide spectrum which include Global 1000 enterprises, regional listed companies, different vertical industries, public utilities, Government, a vast number of successful SMEs, and consumers in various Asian cities.

      About VRX
      VRX is a consolidated vulnerability management platform that protects assets in real time. Its rich, integrated features efficiently pinpoint and remediate the largest risks to your cyber infrastructure. Resolve the most pressing threats with efficient automation features and precise contextual analysis.

      Need help? Our team is just a message away