Anyone has tried Serverius new waf?

failhostings

https://sercurius.net
Is it of any good?

BlaZe

Nope, but looks interesting.
Thanks for the share.

ese_enzo

Shit!! now I can't stop until get a 100%

failhostings

@ese_enzo said:
Shit!! now I can't stop until get a 100%

I use another waf and i cant get more than 88% the heck.

@BlaZe said:
Nope, but looks interesting.
Thanks for the share.

i guess from now we will have even more waf services going on , everyone wants a piece of cake from cloudflare . This is a good things less websites being offline when cloudflare goes ape shit.

ErawanArifNugroho

Thanks, I got 100%

Reaperofpower

I wonder if this a cloudflare reseller

Learntolive

Does it actually work against xss and sql injections?

Neoon

84% not bad, not terrible.

failhostings

@Learntolive said:
Does it actually work against xss and sql injections?

They say so the best is to test it yourself as they claim they are still in the beginning.

failhostings

@Reaperofpower said:

I wonder if this a cloudflare reseller

no its made in house

jsg

I didn't look extensively but my first impression is that they are hands down and honest. Example: "Is it bullertproof? NO!".

As they are also engaged in considerable peering, incl. free (up to 10Gb/s!) my take is that for central Europe, in particular the mid northern part (NL, BE, DK, DE, FR, UK) they are quite attractive. I will open a free account and have a closer look.

jsg

Update:

• Sercurius does some arbitrary tests (next to useful ones). Example: it complains when your server string (like e.g. "apache 2.3.4") is provided.
• Their string handling/checkingstill is a bit wobbly. Example: If your config has an "X-Xss-Protection" entry (which is perfectly fine) Sercurius complains about that header not being provided, simply because they search for "X-XSS-Protection".
• Unfortunately they do not at all look for some real problems like e.g. a www readable .htaccess file.

All in all I like Sercurius as a comfortable quick checker but it shows that they still have quite a lot of work to do.

ErawanArifNugroho

From some testing using securius.net :

• bitninja.io SECURITY GRADE 88%
• sercurius.net SECURITY GRADE 73%
• krebsonsecurity.com SECURITY GRADE 56%

Just curious, why sercurius itself only had 73%

failhostings

I tried it yestarday it failed to setup even if dns was done . I couldn't even delete the website as i got errors. My advice is trash don't use it sorry everyone .

jordynegen11

I can speak from experience:

Serverius is not the company that you want to buy services from. Also I know alot of people with alot of problems using their colocation services.

There are alot of datacenters in NL that are way better.

My tip: move to the next one

failhostings

@jordynegen11 said:
I can speak from experience:

Serverius is not the company that you want to buy services from. Also I know alot of people with alot of problems using their colocation services.

There are alot of datacenters in NL that are way better.

My tip: move to the next one

Can you elaborate why serverius is shady?
Except the manny Russia names in its leading and their cheap routing.

jordynegen11

@failhostings said:
Can you elaborate why serverius is shady?
Except the manny Russia names in its leading and their cheap routing.

• Bad uptime
• Shady power and bandwidth bills
• Their DDoS protection is poop
• Employees do not adhere to the agreements
• Slow reaction times
• This is a datacenter using WHMCS and their custom skin, modules are shit and are badly coded.

desperand

btw, are there any other alternatives to cloudflare waf?
Looking for lowend offers with WAF.

alexvolk

@jordynegen11 said:

• This is a datacenter using WHMCS and their custom skin, modules are shit and are badly coded.

What is the problem with using WHMCS? Why are you using WHMCS?

jordynegen11

@alexvolk said:

@jordynegen11 said:

• This is a datacenter using WHMCS and their custom skin, modules are shit and are badly coded.

What is the problem with using WHMCS? Why are you using WHMCS?

Don't say its bad but not something I should use in a enterprise datacenter environment.

Als their modules seems very bad/unproffesional coded.

failhostings

@jordynegen11 said:

@alexvolk said:

@jordynegen11 said:

• This is a datacenter using WHMCS and their custom skin, modules are shit and are badly coded.

What is the problem with using WHMCS? Why are you using WHMCS?

Don't say its bad but not something I should use in a enterprise datacenter environment.

Als their modules seems very bad/unproffesional coded.

that makes sense since serverius claims to be an enterprise datacenter , finalhosting is a small business.

EveNeko

No thanks

failhostings

@EveNeko said:

No thanks

well any waf will suggest to close port 21 but thats not why sercurius sucks.

EveNeko

@failhostings said:

@EveNeko said:

No thanks

well any waf will suggest to close port 21 but thats not why sercurius sucks.

No, SSH runs on port 22