Recently my company had a website which was hacked due to poor code. As we have been reviewing what steps to take making the site secure and resuming business the question was posed to me about the security of our new site (new site being developed on MODx 9.6.3). Our plan once we get the code and system up to date on the old website is to invest in third-party penetration testing.
Have any of you used an outside group or solution test your MODx site? Have you done any other security testing or have information on it?
I have not seen much in the documentation that speaks to security - if you are aware of anything I would appreciated a link.
Thanks
-J.
I did a few courses on "Ethical Hacking" and we’re about 6 weeks away from launching a new site, in modx, that will be assessed by an external company. I’ll happily discuss who we are using and why over PM but don’t really want to "advertise" on the forum.
