[VOIPSEC] Anyone know of a hosted service for scanning security of SIP services?

[Dan York]

VOIPSEC members,

Here at SIPNOC this week, one of the attendees asked me if there was a hosted service that could test the security of a SIP server.  Something like the port scanning services like "Shields Up" (http://en.wikipedia.org/wiki/Shields_Up ) and the many other similar services.

The person asking was from a service provider who is selling SIP connectivity to small businesses with IP-PBXs.  Many of these small businesses don't have IT staff (and perhaps have purchased their IP-PBX from a big box store, online, etc.).  Those SMBs don't know anything about security.  He was wondering if there was any service he could direct his customers to where they could just go and get a scan of their externally-exposed SIP connections.

I haven't heard of one... but this does seem like a cool service that someone could offer.  Anyone heard of one?  (Anyone going to write one after this message?  ;-)

Dan

-- 
Dan York, CISSP, Director of Conversations
Voxeo Corporation   http://www.voxeo.com  dyork at voxeo.com
Phone: +1-407-455-5859  skype: danyork  sip:dyork at voxeo.com

Join the Voxeo conversation:
Blogs: http://blogs.voxeo.com
Twitter: http://twitter.com/voxeo  http://twitter.com/danyork
Facebook: http://www.facebook.com/voxeo