OWASP / CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.
https://cheatsheetseries.owasp.org
Creative Commons Attribution Share Alike 4.0 International
27.06k stars 3.79k forks source link

Update Transport_Layer_Security_Cheat_Sheet.md #1434

Closed stellastrareviews closed 1 week ago

stellastrareviews commented 1 week ago

Added Stellastra's Cipher Suite Checker

Thank you for submitting a Pull Request (PR) to the Cheat Sheet Series.

:triangular_flag_on_post: If your PR is related to grammar/typo mistakes, please double-check the file for other mistakes in order to fix all the issues in the current cheat sheet.

Please make sure that for your contribution:

If your PR is related to an issue, please finish your PR text with the following line:

This PR covers issue #.

Thank you again for your contribution :smiley:

szh commented 1 week ago

Can you please provide some background about this service? Is it a well trusted player in the industry?

jmanico commented 1 week ago

Since we have other commercial offerings on this list, with hesitation, I did accept this.

"Stellastra has established itself as a notable platform in the cybersecurity field, particularly for its comprehensive evaluation and ranking of cybersecurity companies worldwide. It compares over 7,000 companies across various categories, including DMARC, email security, and TLS analysis, using metrics like relevancy, popularity, security scoring, and focus within specific domains​"

kwwall commented 1 week ago

Since we have other commercial offerings on this list, with hesitation, I did accept this.

"Stellastra has established itself as a notable platform in the cybersecurity field, particularly for its comprehensive evaluation and ranking of cybersecurity companies worldwide. It compares over 7,000 companies across various categories, including DMARC, email security, and TLS analysis, using metrics like relevancy, popularity, security scoring, and focus within specific domains​"

As long as that glowing review didn't come from stellastra.com ;-)

jmanico commented 1 week ago

That was me and I have zero affiliation with the company. It was a AI hit and may just be marketing, I am happy to remove this if you folks think that is best.

kwwall commented 1 week ago

@jmanico - No worries; JK.

stellastrareviews commented 1 week ago

Thanks for your consideration. WRT trust we have been recognized by Bugcrowd, Pentest-Tools.com, PowerDMARC, Cohesity, and others. @szh, the link could also be edited to show our breakdowns of 300+ cipher suites: https://stellastra.com/cipher-suite

mackowski commented 1 week ago

Looks that someone must decide :-) We have other similar links here, results from scanning looks ok. I will merge that