Buying Peace of Mind with StillSecure and Hostway

We all have tasks we should work on but for some reason, they never seem to reach the top of the pile. In our personal lives, this can be anything from cleaning the oven to picking up the dry cleaning. In our work lives, these projects usually include things like expense reports, low priority emails, [...]

StillSecure delivers File Integrity Monitoring Services

File Integrity Monitoring Helps Companies Identify and Remediate Imminent Security Breaches Superior, CO – June 21, 2011 – StillSecure®, a managed network security solutions and certified compliance company, today introduced the StillSecure File Integrity Monitoring Service for organizations seeking to ensure that their systems have not been compromised and those currently struggling with regulatory compliance [...]

StillSecure Launches Industry’s First Comprehensive Managed Security Services Suite for Public and Private Clouds

Superior, CO – May 25, 2011 — StillSecure®, a managed network security solutions and certified compliance company, today unveiled the StillSecure Cloud Security Services Platform, the industry’s first comprehensive suite of managed security services for both public and private cloud environments. The StillSecure Cloud Security Services Platform provides easy deployment of StillSecure’s powerful suite of [...]

The Xilcter/Zeus Trojan, by Cesar Salas, SOC Analyst

Let’s take a look at the last 7 days of suspicious activity in which we find the Xilcter/Zeus Trojan running wild with an average of 864 unique events per customer. This is an average of over 120 per day. It’s becoming more and more evident that propagation of this Trojan has grown significantly. It seems [...]

Hackers targeting SecureID two-factor Authentication, by Gabriel Bellas, SOC Analyst

With the creation of brute force attacks, two-factor authentications have long since become the new standard for Network Security. Two-Factor authentications, as the name implies, uses two independent factors in conjunction to authenticate a person, generally resulting in a higher level of authentication assurance. By taking something you know such as a password and combining [...]

‘Don’t Leave Your IT Security to Luck’ Event in Boca March 17

    Lunch & Learn Session Co-Sponsored by Host.net and StillSecure BOCA RATON, FL (March 10, 2011) – Learn how to protect your enterprise data against attacks, whether you’re housing it locally or in the cloud, in “Don’t Leave Your IT Security to Luck,” a lunch-and-learn session from 11:30am-1:30 pm on Thursday, March 17 being [...]

StillSecure to offer Managed Security and Certified Compliance Solutions to Coresite customers

StillSecure Joins CoreSite’s CloudCommunity, Fostering Innovation and Thought Leadership on Cloud Security. Santa Clara, CA – March 10, 2011 — StillSecure®, a managed network security solutions and certified compliance company today announced at the Cloud Connect Conference, that the Company will provide its complete suite of managed security and certified compliance solutions for CoreSite’s data [...]

Back Door Trojan by Cesar Salas, StillSecure SOC Analysts

In today’s security world of ever changing threats, there are some threats that get overlooked by most IT professionals trying to secure their systems. Generally most threats target port 80(HTTP), 25(SMTP), and 21(FTP). Thus these common ports are the ones most defended, however, the overall feeling concerning 443(SSL”HTTPS”) is that the information passing through is [...]

The Problem isn’t the PCI DSS – Compliance as the First Step Towards Security

While listening to Dr. Anton Chuvakin (@anton_chuvakin) the other afternoon on a webcast and talking briefly with Joshua Corman (@joshcorman) the other week, I started to realize that the problem the merchant industry is dealing with around compliance vs. security isn’t really with the PCI DSS.  The PCI DSS is just about a goal – getting people [...]

PCI Compliance shouldn’t be such a headache.

We believe it’s time our industry stepped up to the plate.  Claims that technology products will make someone PCI compliant have to stop.  Hand waves towards compliance aren’t acceptable any more.  Companies that sit on both sides of the table – both auditor and service provider – are setting their clients up for failure and damaging the reputation of our industry.

PCI compliance is the best way to give companies a solid baseline for security moving forward – but only if it’s done correctly.  It’s no wonder that the distraction of the current solutions delude companies into thinking they are secure as a result of their compliance efforts.  Compliance should be achievable and manageable so companies aren’t distracted from taking true, measurable steps towards better levels of security.

And, that’s how PCI Complete was born. Out of the frustration and confusion that we were hearing from customers; out of the pain of melding a variety of solutions, processes, and personnel to solve a problem that has vexed the vast majority of merchants and transaction processors; and, out of the gap in the market – where no single, consistent PCI solution existed.