Questions tagged [saas]

Software as a service (SaaS) is a licensing model where software is sold as a cloud service.

4 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
1answer
174 views

ISO 27001 compliance for application or hosting?

I received a question as follows: Does the vendor solution need to have the ISO 27001 certification for the application itself, or just for the hosting of the platform? In my understanding, ISO 27001 ...
2
votes
0answers
75 views

Patch management for production servers

I'm trying to implement an automated patching program at a small SaaS provider. When a customer signs up for our software, we provision them a Linux VM in our primary datacenter. Each customer also ...
1
vote
0answers
22 views

Does application security assessments done using SaaS solutions (WhiteHat Sentinal and Fortify on Demand) count as penetration tests?

SaaS security solutions such as "WhiteHat Sentinal" and "Fortify on Demand" are getting popular now a days. Methodologies of both describe them involving manual verification. Does this qualify the ...
0
votes
0answers
34 views

If our service health API shows the commit/service version, what are the risks?

When working with cloud services and deployments, the load balancers often use a health endpoint to ensure that the service node is up and running and can take traffic. To catch as many issues we can ...