Redefining Credit Union Web Security

Our Web and Application Security Approach

CUdefenders’s enterprise-grade PCI-certified Web Application Firewall (WAF) ensures that your Credit Union website or application is always secure and available. Based on industry-leading web and application security technology using a “Security as a Service” (SaaS) approach, CUdefender manages and updates the WAF 24×7 to ensure that your Credit Union is always protected against new and emerging cyber threats. CUdefender’s WAF can be set up and configured within a matter of minutes by changing your website’s DNS setting.

Capabilities

Protection against OWASP Vulnerabilities

CUdefender’s Enterprise-Grade Web Application Firewall (WAF) protects Credit Unions against the Open Web Application Security Project (OWASP) most critical Web and Application Security risks.

SQL Injection

SQL Injection is a code injection technique that exploits a security vulnerability in the database layer of an application.

Illegal Resource Access

Illegal resource access is a web application attack used to access restricted resources and sensitive pages on your web server.

Cross-Site Scripting (XSS)

Cross-Site scripting is a web application attack that exploits vulnerabilities on a visitor’s browser, often leading to data theft and potential installation of malicious software on visitor’s computers.

Remote File Inclusion

Remote file inclusion allows an attacker to include a remote file usually through a script on the web server. Hackers use these type of attacks to steal information and crash your web site.

PCI Certification and Reporting

CUdefender’s WAF technology is certified by the PCI Security Standards Council. It delivers cost-effective compliance with PCI DSS requirement 6.6 without any hardware or software installation and without changes to your web application.

CUdefender protects your Credit Union from liabilities while protecting your members’ sensitive data from exposure on your site.

Customer-Specific Threat Policy Management

By simply logging into the customer portal, each security rule can be configured specifically according to your desired blocking policy (block request, block IP, block session, or block log only).

False Positive Tuning and Exception Handling

The security policy can be fine-tuned to address specific URLs, fields, IP addresses, and countries. Powerful access control capabilities enable you to define exceptions and minimize false-positives.

Detailed Threat Analysis

CUdefender provides Credit Unions with a detailed analysis of every threat that was posed to your website or application including: IP address, user agent, location, and other pertinent session information.

Custom Security Rules

CUdefender’s custom security rules allow you to apply your Credit Union’s security policy within CUdefender’s Web Application Firewall, by configuring a variety of rule triggers and adding different rule actions.

SECURE YOUR CREDIT UNION NOW

Why Credit Unions choose CUdefender?

Our mission is simple. We protect Credit Unions from Cyber Threats.

Cost Effective for Credit Unions

CUdefender’s cloud-based service offers 24×7 protection against cyber attacks without the need for expensive software or additional hardware. Using CUdefender allows your Credit Union to meet FFIEC and NCUA guidelines for cyber-security and provide staff and members with peace of mind.

Easy Setup and On-Boarding

Our services can be delivered from the cloud without the need for any hardware or software. This provides for seamless and near-instant deployment, while also allowing our Credit Union customers to maintain their existing hosting and application infrastructures.

24 X 7 Support

CUdefender’s services are supported by a team of dedicated security engineers. Their responsibilities include: proactive response and event management, continuous real-time monitoring, adept policy tuning, summary attack reports, and 24×7 support.

Comprehensive and Collaborative Protection

CUdefender protects Credit Unions using collective knowledge about security threats, including new and emerging DDoS attack and penetration methods. Using crowdsourcing techniques, new security information is aggregated across the entire network and new mitigation rules are applied in real-time.