[LINK] webmaster tool

[stephen at melbpc.org.au]

Speaking of webmaster tools .. haven't seen OWASP mentioned before ..

 <https://www.owasp.org>

 
The Open Web Application Security Project (OWASP) is a worldwide free and 
open community focused on improving the security of application software. 

Our mission is to make application security visible, so that people and 
organizations can make informed decisions about true application security 
risks. 

Everyone is free to participate in OWASP and all of our materials are 
available under a free and open software license. 

There are over 70 OWASP Local Chapters world-wide that are free and open 
to anyone to attend. (Includes Sydney, Melbourne, Brisbane and Perth) 

OWASP tools and documents can be used to detect and to guard against 
security-related design and implementation flaws, as well as to add 
security-related activities into YOUR Software Development Life Cycle 
(SDLC). 

For more information please visit http://www.owasp.org 

Featured projects include: 

* OWASP Top 10 (The OWASP Top Ten provides a powerful awareness document 
for web application security. The OWASP Top Ten represents a broad 
consensus about what the most critical web application security flaws 
are) http://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project 

* OWASP WebGoat (WebGoat is a deliberately insecure J2EE web application 
maintained by OWASP designed to teach web application security lessons. 
In each lesson, users must demonstrate their understanding of a security 
issue by exploiting a real vulnerability in the WebGoat application 
http://www.owasp.org/index.php/Category:OWASP_WebGoat_Project 

* OWASP ESAPI (FOSS (Free and open source software) Security Library for 
Java, PHP, .NET, ASP and Haskell) 
http://www.owasp.org/index.php/Category:OWASP_Enterprise_Security_API 

* OWASP Live CD! Collection of OWASP tools on a CD that you can boot from 
any computer! 
http://www.owasp.org/index.php/Category:OWASP_Live_CD_Project 

* OWASP Application Security Verification Standard 
http://www.owasp.org/index.php/Category:OWASP_Application_Security_Verific
ation_Standard_Project 

* OWASP Code Review Guide 
http://www.owasp.org/index.php/Category:OWASP_Code_Review_Project 

* OWASP Developers Guide 
http://www.owasp.org/index.php/Category:OWASP_Guide_Project 

* OWASP.NET Project 
http://www.owasp.org/index.php/Category:OWASP_.NET_Project 

* OWASP Legal Project (Secure Software Contracts for Developers/Clients) 
http://www.owasp.org/index.php/Category:OWASP_Legal_Project 

* OWASP SAMM (Software Assurance Maturity Model)
http://www.owasp.org/index.php/Category:OWASP_Software_Assurance_Maturity_
Model_Project 

* OWASP Testing Guide ("best practice" penetration testing framework) 
http://www.owasp.org/index.php/Category:OWASP_Testing_Project 

--

Cheers,
Stephen
 
> Although still in beta, and with a free version for small non
> commercial users, imho this is the best webmaster's tool i've come
> across, for sure. Even google analytics needs 24 hour update periods
> but this tool is live. Sure the info below sounds/reads like an ad..
> but, I'm not re-writing it.
> 
>  <http://www.woopra.com>
> 
> Features Overview:
> 
> Woopra delivers a complete suite of enterprise grade analytics in one 
> easy to use live interface. Now you can monitor multiple Websites 
> simultaneously in a tabbed window and switch quickly between each.
> 
> Woopra also lets you watch visitors LIVE as they navigate your site, 
> interact with them via Chat, set up real time notifications, track 
> campaigns, set up funnels, and much more.
> 
> Live Dashboard
> Woopra’s Live Dashboard updates instantly with every action that occurs 
> on your website. You get a quick overview of exactly what’s happening 
> without refreshing or scrolling through long web pages!
> 
> 
> Today Vs. Trends
> The live chart at the top left of the Dashboard enables you to compare 
> today’s hour-by-hour traffic against historical averages, allowing you 
to 
> quickly spot traffic spikes or shifting trends.
> 
> Visitor Engagement
> Woopra doesn’t just tell you how many people are currently on your 
> website, it also enables you to see how they are interacting with your 
> web pages, whether they’re viewing, idle or even responding.
> 
> Active Pages
> The Active Pages View enables you to see what your visitors are viewing 
> right now. The pages are ordered from the most active to the least so 
> that you can easily identify your trending pages. This is extremely 
> useful for spotting pages that are getting traffic so you can run a 
> segmentation analysis to see where the traffic is coming from.
> 
> Recent Search Queries
> Do you have a lot of search engine traffic? Would you like more? 
> In order to really drive search traffic you must understand what your 
> visitors are looking for when on your website. Woopra’s search 
> engine data, combined with tools such as Google Insights, can help you 
> better target keywords and increase site visitors.
> 
> Active Referrers
> The Active Referrers area lets you keep an eye on who referred visitors 
> to your website. This feature helps you spot the current top traffic 
> sources, and focus your attention on those who are most prolific.
> 
> Active Countries
> Get a handle on where your traffic is originating by keeping an eye on 
> the most active Countries. Although you can run reports in the 
> Analytics section anytime, by watching the active geographies you can 
> spot trends and see how traffic from different timezones translates 
> to visitors on your site.
> 
> If you use WordPress, Joomla, vBulletin, Drupal or another type of CMS, 
> Woopra provides a plug in for 24 different types of systems. All you 
> have to do is choose your CMS from the list, then they provide a plug in
> to download, install, and enable.
> --
> 
> Cheers,
> Stephen


Message sent using MelbPC WebMail Server