SIDN and RA team up to give hosting firms insight into the security status of their platforms
By launching the Hosting Infrascan, the two organisations aim to help the hosting sector make the internet more secure
By launching the Hosting Infrascan, the two organisations aim to help the hosting sector make the internet more secure
In order to maximise and maintain the security of their technical infrastructures, hosting service providers need a clear picture of any weak spots. That implies performing or commissioning large-scale hosting platform scans to detect vulnerabilities. Unfortunately, such scans are expensive and consequently uneconomical for many firms. SIDN, the Registrars' Association and ThreadStone have therefore linked up to create the Hosting Infrascan. The scan provides hosting service providers with the security status information they need.
"There's more to keeping the .nl domain secure and trustworthy than making sure that our own technical infrastructure is sound," says SIDN's CEO Roelof Meijer. "It's vital that the platforms where .nl domain names and websites are hosted are secure as well. Many .nl registrars or their resellers provide hosting services. The Hosting Infrascan is designed to help them identify weak spots, so that issues can be resolved. Because we're committed to keeping the .nl domain as secure as possible, we're covering the bulk of the cost."
"Since 2018, SIDN has been investing some of the income from .nl in projects that enhance the domain, while also benefitting .nl registrars," explains Xander Slootweg, Managing Director of Internet Today and Registrars' Association Board member. "The projects are co-creations of the RA and SIDN. The Hosting Infrascan is one of the products of that teamwork, like the SIDN Academy and the Legal Help Desk for .nl registrars."
The Hosting Infrascan is carried out by ThreadStone. Working from IP address lists provided by hosting firms, ThreadStone checks out each platform's servers and firewall. Details of all the vulnerabilities detected are then shared with the hoster. That might include issues with SSL certificates, firewall ports that shouldn't be open but are, outdated operating systems and so on. The scan results are presented on a user-friendly personalised dashboard, and hosting firms can also call on support from ThreadStone's certified ethical hackers. .nl registrars and hosting service providers can get more information or register for the service at www.hostinginfrascan.nl.