G-Cloud 11 services are suspended on Digital Marketplace

If you have an ongoing procurement on G-Cloud 11, you must complete it by 18 December 2020. Existing contracts with Netcraft are still valid.
Netcraft

iOS and Android Cybercrime Protection

The great majority of victims of phishing fall for the attacks while using devices such as phones and tablets. Netcraft's mobile apps for iOS and Android protect your employees against phishing and web based malware when they are using mobile devices.

Features

  • Applications for iOS and Android
  • Blocking of phishing using Netcraft's phishing feed
  • Blocking of shopping site skimmers
  • Blocking of web-Inject malware
  • Blocklists can be customised according to your needs.

Benefits

  • Protect employees using mobile devices

Pricing

£60,000 to £120,000 a unit a year

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at asi@netcraft.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 11

Service ID

8 2 7 7 4 7 2 6 5 9 8 6 9 9 9

Contact

Netcraft Andy Ide
Telephone: 01225 447500
Email: asi@netcraft.com

Service scope

Software add-on or extension
No
Cloud deployment model
Public cloud
Service constraints
All modern web browsers supported.
System requirements
Web Browser

User support

Email or online ticketing support
Email or online ticketing
Support response times
We have 24/7 support
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Support is provided by electronic mail and telephone.
Support available to third parties
No

Onboarding and offboarding

Getting started
We provided online documentation, and also can provide a Webex (or similar) demonstration of the app and installation options.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
N/A
End-of-contract process
N/A

Using the service

Web browser interface
No
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
N/A
Service interface
No
API
No
Customisation available
Yes
Description of customisation
Buyers can decide what threat types they would like included in their feed.

Scaling

Independence of resources
We scale our applications to account for load placed by all customers.

Analytics

Service usage metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
Less than once a year
Penetration testing approach
In-house
Protecting data at rest
Other
Other data at rest protection approach
We physically secure access to our data centre and backup media.
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
N/A
Data export formats
Other
Other data export formats
N/A
Data import formats
Other
Other data import formats
Not Applicable

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
If the Service is unavailable continuously for 3 (three) days or unavailable for an aggregate of 120 (one hundred and twenty) hours within the Subscription Period the customer may terminate the Service and receive a pro-rata refund for the unused period.
Approach to resilience
Available on request
Outage reporting
Email alerts

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
User Account Authentication, Multi Factor Authentication, IP ACLs
Access restriction testing frequency
At least once a year
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
You control when users can access audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
You control when users can access audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
No
Security governance approach
Risk based approach.
Information security policies and processes
Defined in our internal Policies and Procedures document

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
We have an internal change management process
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Netcraft is a PCI approved scanning provider, and tests its own infrastructure. Patches are applied as appropriate.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Netcraft has a Security Incident Detection and Remediation programme.
Incident management type
Supplier-defined controls
Incident management approach
We have an internal policy for handing incidents.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Price
£60,000 to £120,000 a unit a year
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
We can offer a 14 day trial of the service.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at asi@netcraft.com. Tell them what format you need. It will help if you say what assistive technology you use.