Secunia Personal Software Inspector (PSI) 2.

0
- FREE Security Tool for Personal Computers

Essential Security
The Secunia PSI is a free security tool for home users, designed to detect vulner-
able and outdated programs and plug-ins, which expose your PC to attacks. At-
tacks exploiting vulnerable programs and plug-ins are rarely blocked by traditional
anti-virus and are therefore increasingly “popular” among criminals. "Number one is the Secunia
The only solution to block these types of attacks is to apply security updates, com- Personal Software Inspector,
monly referred to as patches. Patches are offered free-of-charge by most software quite possibly the most
vendors, however, finding all of these patches is a tedious and time-consuming task. useful and important free application you can
The Secunia PSI automates this and alerts you whenever your programs and plug- have running on your Windows machine.”
ins require updating to stay secure. Moreover, if the new “Auto Update” feature
ZD Net
is enabled, most of the insecure programs can be updated automatically without
user interaction.
With the Secunia PSI, updating your programs and keeping your PC secure is as
simple as pushing a button.

What’s New?
Auto Update
The Auto Update functionality allows users to secure their computers by
simply installing the Secunia PSI, and configuring it for Auto Update. The
Secunia PSI will then automatically detect insecure programs, download the
"Secunia provides tremendous value for their
required patches from the vendors, and install them accordingly.
customers, end-users, and to other security
The key benefit to the user is that once installed and configured for Auto vendors.”
Update, the Secunia PSI automatically installs the most important patches Frost & Sullivan
without further user interaction, thus relieving the users from spending time 2010 Best Practices Award
in fetching the patches by themselves and then manually installing them.

Integration with the Secunia Corporate Software Inspector (CSI)

The Secunia PSI now offers integration with the Secunia CSI, making it possible to
report its local scan results to the centralised Secunia CSI dashboard.This feature
helps the Secunia CSI administrators in organisations to track the security status

secunia.com
of PC users that occasionally connect to their corporate networks,
and are therefore not included in the regular update cycles.
This is especially useful for administrators in educational institutions,
where they do not have control or access to students’ PCs connecting
to the university’s network. By encouraging these users to install
Scan results
The scan results of the Secunia PSI provide details about the full
installation path, version details, direct links to patches, ratings, and
access to Secunia Advisories with further vulnerability details and
metrics, as well as other useful information for alternative mitigation
strategies. EXE

the Secunia PSI on their PCs, the administrators can get a better
overview of both internal and external vulnerability threats from
the Secunia CSI dashboard, and implement a more comprehensive
security policy in an efficient manner.
IT Administrator
The scanning also detects and reports end-of-life programs and plug-
ins. These are programs which for some reason are not supported
by the vendor. Programs which have reached end-of-life should
not be used due to lack of vulnerability information about these
products, and because the vendors will not be providing security
updates.
The Secunia PSI also lists all the programs and plug-ins which are
patched and up-to-date. This can be used to verify that patches
have been properly applied and that old insecure versions have
been removed. It can also be used as a valuable and highly accurate
supplement to other asset and licenseEXEmanagement
OCX DLL tools, as well
as to track installation of non-approved programs and plug-ins.

1 The Secunia PSI 2.0 scans your

EXE computer
OCX DLL
AProgram 1.0
BProgram 1.0
CProgram 3.0
AP
BP
CP
DProgram 2.0 Secunia DP
Advisory
EProgram 1.0 EP

How it Works
The Secunia PSI is an invaluable tool for you to use when assess-
2 It scans all executables, including EXE, OCX, and
DLL files using the Secunia File Signatures
ing the security patch state of programs installed on your system.
It constantly monitors your system for insecure programs, notifies EXE OCX DLL

you when an insecure program is installed, and even provides you

with detailed instructions for updating the program when available.
Non-intrusive authenticated vulnerability and patch
scanning
The Secunia PSI takes a different approach compared to other
scanners by conducting authenticated scans of systems. This
makes it possible for the Secunia PSI to identify all installed 3 The Secunia PSI 2.0 tells you which version to
update
programs and plug-ins based on the actual files present on the AProgram 1.0
AProgram 1.0
BProgram 1.0
AProgram 1.2
AProgram 1.2
BProgram 1.0

system. BProgram 1.0

CProgram 3.0
CProgram
BProgram 1.0
CProgram 3.0
DProgram 2.03.0 Secunia CProgram
DProgram 2.1 3.0
The Secunia PSI correlates program meta data with Secunia’s DProgram
EProgram 1.02.0
Advisory
Secunia DProgram
EProgram 1.0 2.1
Advisory
comprehensive product database to build an inventory of the EProgram 1.0 EProgram 1.0

installed programs and plug-ins. This inventory is then correlated

with vulnerability metadata based on Secunia Vulnerability
Intelligence.
4 Automatic patch deployment using Auto Update
The accuracy of this approach is unprecedented and provides
actionable results with risk ratings and other metrics based on AProgram 1.2 Patch A Patched

Secunia Advisories. Patch B Patched

DProgram 2.1
AProgram 1.0 AProgram 1.2
BProgram 1.0 BProgram 1.0
CProgram 3.0 CProgram 3.0
DProgram 2.0 Secunia DProgram 2.1
Advisory
EProgram 1.0 EProgram 1.0

secunia.com
 Summary of Features
Non-intrusive authenticated vulnerability and patch
scanning
Covers programs and plug-ins from thousands of
vendors
Unprecedented accuracy, no more false positives
Reports security status for each program
Reports criticality rating for each insecure program
Reports end-of-life programs
Identifies missing patches
Auto Update of programs
Integration with the Secunia CSI
Stay Secure
Keeping your PC, and especially your third-party programs
updated, requires you to search the Internet for updates and
patches for all your installed programs on a regular basis. These
time-consuming and manual steps are now obsolete and com-
pletely automated with the Secunia PSI.
The Secunia PSI is the next generation security tool designed
with the sole purpose of helping PC users secure their computers
against vulnerabilities in programs. It is non-intrusive, lightweight,
and leverages a unique file signature technology to deliver fast,
precise, and high quality results. It rapidly scans your computer,
pinpoints exactly which patches you need, downloads the patches,
and then installs them accordingly.
Protecting your PC with the Secunia PSI is now as easy as pushing
a button.
To learn more and download the Secunia PSI, visit:
http://secunia.com/vulnerability_scanning/personal/
Being the leading provider of Vulnerability year one exhibited peerless financial and strategic
Intelligence, Secunia plays an important role performance, proving the following by organic means:
in the security ecosystem, and is the preferred
supplier for many enterprises and government
agencies around the globe.
Vulnerabilities in programs represent the ‘Achilles’
Heel’ of any network or IT system. Secunia’s
mission is to identify and eliminate the threat
from these vulnerabilities, by accurately tracking
software vulnerabilities and supplying products to
our customers, and the community.
The quality and importance of Secunia in the security
ecosystem is publicly recognised by customers,
partners, software vendors, industry peers, the Contact sales@secunia.com for more information
media, and the community. Secunia has from
secunia.com
Partnership and Distribution Models
Secunia offers various partnership models whereby partners
can utilise the Secunia PSI to create value for their business and
customers. Our partners include, but are not restricted to: Inter-
net service providers, security vendors, as well as financial and
educational institutions.
Internet Service Providers (ISP)
Secunia provides the market’s best security solution focused
on free security updates to ISP customers. Secunia can assist in
awareness campaigns targeting customers and other initiatives.
Security Vendors
We offer security vendors the ability to integrate the Secunia PSI
solution into their security suites targeted at consumers.
Financial Institutions
Secunia offers products focused on helping secure the end-
customers of financial institutions, i.e. customers who engage in
online financial transactions. We have seen a huge interest in our
tailor-made solutions which include vulnerability scans as part of
the login process - e-banks, for example.
Educational Institutions
Secunia provides non-commercial partnerships to educational
institutions, enabling them to distribute the Secunia PSI free-of-
charge to their students.
“Secunia PSI won’t do away with the need to run
a good anti-virus program and firewall on your
PC. But it provides a solid layer of free protection
that no PC should do without.”
PCWorld
Higher growth than market average since
inception
Continuous growth in staffing
Yearly profitability
No bearing debt
Privately funded, no venture capital
Dun and Bradstreet AA rating
A very strong and credible brand provider