FAQs

No. RADAR™ testing is based on a revolutionary patented non-disruptive DDoS testing technology that has ZERO impact on ongoing operations. It is an automated solution that runs on live production environments at pre-scheduled time periods.

Yes. RADAR™ testing checks production environments automatically against over 140 different types of DDoS attack vectors, from layers 3, 4 & 7 (Application Layer) attacks.

RADAR™ testing assists organizations in identifying, and continually eliminating their DDoS vulnerability gap to as little as under 2%.

MazeBolt’s professional services are top experts worldwide in the DDoS field. Many of them originally come from various other leading DDoS mitigation companies. MazeBolt’s professional services provide –

• Very strong support – MazeBolt’s professional services allow our customers to focus on their business, using our experience in DDoS mitigation to assist in liaising with DDoS mitigation vendors. We will make closing vulnerabilities a painless process. We are with you every step of the way.
• Leading DDoS experts – Our DDoS experts have all come from leading DDoS Mitigation companies and understand both defense and attack. We have worked with over 100 enterprise organizations consulting on vendor remediation, real-time attack analysis, and deep DDoS architecture planning and understanding.
• The liaison with your mitigation company – Our professional service DDoS experts will guide your remediation efforts with your DDoS mitigation vendors. If required, our professional service can also help plan new architectural changes.
• Customize attack simulation vectors to add to RADAR™️ Testing – If your organization requires specific attack vectors for proprietary reasons. MazeBolt’s professional services, together with R&D, will design, QA, and implement your required attack vectors, to be an ongoing part of your RADAR™️ testing platform.

MazeBolt RADAR™️ testing runs 50,000 to hundreds of thousands of DDoS attack simulations a year. It can do this comfortably because it is a patented technology that is non-disruptive to IT operations during these DDoS attack simulations.

Every vulnerability discovered by RADAR™️ testing has all the data required to fine-tune the DDoS mitigation policy; for example, the amount of attack simulation sent and attack traffic received, together with other important reporting parameters. This information allows the DDoS mitigation vendor and MazeBolt to coordinate a perfect policy change for each vulnerability discovered. Because the technology is non-disruptive, revalidating can be done in real-time to fine-tune security policies. Each customer has different requirements, and a mutually agreed-upon schedule for simulations and vulnerability reporting, and remediation intervals is designed together with MazeBolt’s professional services. Providing end-to-end full vulnerability identification coverage and vulnerability remediation management.

See this blog post for in-depth details.

Continuously & On-demand.
You can generate a report of your DDoS Vulnerabilities (DDoS Mitigation Gaps) at any time from your MazeBolt Account. We called this report a Vendor report, additionally, quarterly customers receive an executive report for high-level risk quantification and reduction understanding.

RADAR™ testing vendor reports include a comprehensive and complete story of what took place during that particular DDoS attack simulation. For example, on a per attack simulation basis, the vendor can see:

• Duration of DDoS attack simulation
• Rate of DDoS attack simulation
• Cumulative attack simulation traffic sent
• Cumulative attack simulation traffic received
• Target response monitoring during DDoS attack simulation
• Graphical illustrations of charting during attack simulation
• Knowledge base article on attack simulation with PCAP example of an attack

MazeBolt’s SOC team generates an executive summary once a quarter.

Yes. The MazeBolt RADAR testing platform UI has a wealth of information on all DDoS attack simulations.

• The RADAR™ testing cycles (for each IP address or FQDN) normally run between 4 and 8 hours daily.
• RADAR™ testing automatically moves on to the next IP or FQDN address until the company’s entire DDoS attack surface has been tested against all currently known DDoS attack vectors.

Generally speaking, DDoS attacks start at a default of 25 Mbps (for Layers 3 & 4) and work their way up to a maximal bandwidth of 500Mbps. This will also take into account any SLA’s you may have with your DDoS mitigation vendor.

RADAR™ testing only reads the metadata generated from RADAR testing nodes, all other traffic is ignored. Customers will receive a full security spec of all metadata collection and other security standards in force and effect.

No. RADAR™ testing does not read PII (Personally identifiable information ).

Yes & No.

Yes – If RADAR™ testing is validating CDN-based protections the RADAR detector will require the ability to read the X-Forward-for header (Or similar).

No – For DDoS protections which do not traverse a CDN E.g. Scrubbing center, ISP protections, CPE,  decryption is not required.

We identify our attack traffic by looking for and filtering our attack traffic’s source IPs only. In a default configuration, we do not even capture any other traffic other than traffic originating from MazeBolt source IPs. However, there is an exception to this rule, and that is for CDN-based traffic, this will turn the RADAR detector into a mode whereby we begin capturing all traffic, identifying the true source IP in the X-Forward-For header, and then using those statistics to send out. It is important to note that we send out ONLY traffic statistics, and NO PII information or any other data other then TCP related data is sent out via our secure API, our API has 2-factor authentication and communicates only with our data center.

If we have any such new features in the future.  Such a feature will first have in place a contractual agreement with the customer prior to any such feature being enabled on the RADAR detector.

• Yes. We have many considerations we take into account for compliance. Our Data Center is well segmented, and no unnecessary data is stored. MazeBolt is also ISO 27001 compliant and certified (Since 2015). Upon request, this documentation will be provided.
• MazeBolt undertakes pen-testing on a regular basis through 3rd party contractors.

Yes. The RADAR™ testing can test hybrid DDoS mitigation solutions simultaneously.

• System users will add the network to be validated by RADAR™ testing. These network IPs are then automatically and continuously verified for DDoS Mitigation Gaps.
• FQDN names or specific IPs can also be added manually to the system.

RADAR™ testing requires a TAP (Mirror) Port immediately downstream from each of your DDoS Mitigation solutions.

The TAP port needs to be downstream from the DDoS mitigation.

• The ongoing concurrent traffic rate.
• Seeing all traffic toward the targets planned to be tested.