This document discusses VAddy, a web vulnerability assessment tool from Bitforest Co. It offers paid subscription plans through Stripe for features like SQL injection and XSS scanning. Stripe is integrated to handle payments for VAddy subscriptions, accepting cards directly and sending webhook events to VAddy for processing subscriptions and billing changes.

1. Copyright (c) Bitforest Co., Ltd.
VAddy
Stripe
!1

2. Copyright (c) Bitforest Co., Ltd.!2
•
• CTO
• VAddy
• Twitter: @cakephper

3. Copyright (c) Bitforest Co., Ltd.!3
• 2002
• ( ),
• Scutum(WAF) 2009
• VAddy 2014

4. Copyright (c) Bitforest Co., Ltd.
!4
Web
Vulnerability Assessment is your Buddy

5. Copyright (c) Bitforest Co., Ltd.
• (SaaS)
• SQLi, XSS, etc
• Web
• WebAPI CLI
• CI
•
!5

6. Copyright (c) Bitforest Co., Ltd.!6

7. Copyright (c) Bitforest Co., Ltd.!7
Starter Pro Enterprise
) 6,000 19,800 59,800
FQDN 3 3 3
FQDN
2,000 6,000 10,000

8. Copyright (c) Bitforest Co., Ltd.!8

9. Copyright (c) Bitforest Co., Ltd.
Stripe
!9

10. Copyright (c) Bitforest Co., Ltd.
• 2015
•
• VISA / (Master)
• XXXX Payment
• Stripe
!10

11. Copyright (c) Bitforest Co., Ltd.
• 2019 Stripe
•
• VISA/Master/AMEX
• JCB/Diners/Discover
!11

12. Copyright (c) Bitforest Co., Ltd.
• XXXX Payment
• (PGP)
•
• Stripe 10
• Stripe ID VAddy User Id
JSON
• VAddy DB Stripe ID
!12

13. Copyright (c) Bitforest Co., Ltd.
•
•
1
!13

14. Copyright (c) Bitforest Co., Ltd.
Stripe
!14

15. Copyright (c) Bitforest Co., Ltd.!15
+ FQDN( )
Starter Pro Enterprise
) 6,000 19,800 59,800
FQDN 3 3 3
FQDN
2,000 6,000 10,000

16. Copyright (c) Bitforest Co., Ltd.
• Product
• PlanID 1 ( )
• PlanID 2 ( FQDN)
!16
• Subscription
• Subscription ItemID1 - PlanID1
• quantity = 1
• Subscription ItemID2 - PlanID2
• quantity = 0

17. Copyright (c) Bitforest Co., Ltd.
• Stripe Billing
• Metered Billing
•
• (prorate=false)
!17

18. Copyright (c) Bitforest Co., Ltd.
Stripe
!18

19. Copyright (c) Bitforest Co., Ltd.
•
•
• ST*VAddy
•
API
!19

20. Copyright (c) Bitforest Co., Ltd.
• Stripe
• Stripe
•
• webhook
!20

21. Copyright (c) Bitforest Co., Ltd.
!21
@cakephper