Seeker is an application-security product developed by Israeli white-hat firm Hacktics. It performs runtime analysis by hooking into the process executing the application and uses a “Smart Attack Tree” of rules to generate dynamic attacks and identify flaws. The product automatically produces contextual screenshots and step-by-step exploit videos to help developers, QA staff, and non-security team members reproduce and understand issues. Seeker detects a wide range of vulnerabilities, including SQL injection, XML/XPath injection, directory traversal, cross-site scripting, parameter tampering, forceful browsing, malicious content upload, username/password enumeration, insecure redirects, source-code disclosure, insecure storage of sensitive data, cookie poisoning, and more. It currently supports Java and .NET code analysis and works with any database unless stored procedures are used; for stored procedures it supports Microsoft SQL and Oracle. PHP support and MySQL stored-procedure support are planned to roll out in a few months. The team includes former IDF members with high security clearances and has done work for startups, banks, telcos, governments, and homeland security agencies. Seeker is headquartered in Israel and has raised $3M in funding.

Total raised

$3M

Funding rounds

1

Latest round

Equity

Latest activity

May 2010