Security scanning website using existing open source (1467670)

## UPDATE: After careful consideration, we have decided to go for a combination of Magento and WordPress (integrated using Fishpig's Wordpress Integration available from subversion repository) to handle all subscription management, payment processing and invoicing. Please update your bids because now the development of subscription, payment and invoicing and integration with CMS/CRM/ERP has already been done. For selected applicants we have more extensive documentation available. Goal Integrateexisting open source components to create a partially paid service tomonitor third-party websites/servers including an dynamic icon/imageto be used on a monitored website to display the monitor's currentstatus for that website/server. ## Components * Joomla incl. logo + template design * Paypal (optionally support for multiple payment providers) * Seccubus ideally we'd like to give back to the community to contribute to this project by contributing support for other scanners (optional) ## Deliverables ## Goal Integrateexisting open source components to create a partially paid service tomonitor third-party websites/servers including an dynamic icon/imageto be used on a monitored website to display the monitor's currentstatus for that website/server. ## Programming Thewebsite must run under Apache or Nginx webserver. In general, use ofthe following tools and possibilities are preferred: * PHP5.2+ * Mysql 5+ * Joomla 1.6 * Dojo 1.5 and/or jQuery 1.4.2 * Ajax as part of an optimized user experience for form submissions such as user registration, adding servers, etc. * use of existing Joomla extensions as much as possible, preferrably selected based on previous experiences * SMPP for sending text messages; current provider [[login to view URL]][1], looking for cheap worldwide providers * use of CRM/ERP/Customer Care/ticketing software/extension ## Components * Joomla * Paypal (optionally support for multiple payment providers) * Seccubus ideally we'd like to give back to the community to contribute to this project by contributing support for other scanners (optional) * WebNessus * modular scanners * Nessus including web-interface (WebNessus) * OpenVAS including web-interface * Nikto including web-interface (optional) * integration with Facebook, Twitter * mailing list * Google/Woopra/etc statistics and conversion * multi-server support (webservers, master-slaves database, scanning servers) ## Developer requirements - demonstrateprevious projects, use of Joomla + extensions, preferably withreferences for visible projects in NL or Europe that can becontacted (e.g. via phone or Skype) - describeyour software engineering philosophy - giveestimated time of delivery - givefeedback on project description - acceptour Terms and conditions for which we use the Terms and conditionsas defined by the the Federation of Dutch Societies in theInformation Technology Industry (FENIT) ## Payments Paymentswill be issues using … in six fases: 10%after delivery of plan incl description of to be used tools,techniques, etc and timelines 10%after delivery of components integration 10%after delivery of payment and related functionalities 10%backend reporting 30%initial release 30%after 1 month bugfixing * * *This broadcast message was sent to all bidders on Friday Sep 17, 2010 7:16:36 AM: Hello, Thank you for taking the time to bid on this project. Please know that we are looking to find a solution provider that we can build a long-term relation with as we have many ideas we would like to implement. As such, please bear with us with the following questions as we are trying to establish which provider is best for us. Please read 'you' below as 'you and your team' if applicable. In order to determine the next steps we would like to ask you the following questions (more will probably follow depending on your answers). Please note that I, Jeroen Derks, have a programmer background. Open source: - Did you ever integrate an Open Source CMS (such as Drupal, Joomla!, WordPress) with an Open Source CRM/ERP software (such as SugarCRM, vTiger, etc) - If so, which did you integrate, which do you prefer and why? Did you find better alternatives? - I prefer additional code for the Open Source software to be implemented without hacking any files in order to allow for keeping everyting up-to-date as much as possible (security upgrades will be performed always) Do you have experience writing plugins/modules/extensions for the CMS/CRM that you probably will be using to implement my project? Logo/design: - How many proposals for the logo and the (template) design does your bid include? Webserver: - Do you have experience using Apache and/or nginx? How well do you know how to write rewrite rules? Can you show some examples? Database: - Do you have experience in MySQL query and server optimiaztion? Can you give an example? Coding: - Please describe your coding philosophy, do you use any development methodologies? - Do you use coding standards? Can you show them? Can you show code written for previous customers that adhere to these standards? - Do you write inline API documentation? Can you show us? - Can you show us a class currently in use on one of your projects that shows how you deal with complex logic? Additions to the project description: - tests should be performed via cron jobs that call for each engine (Nessus, Nikto, etc) a specific script, easily configurable - results of the tests should be stored in the database, possibly compressed, and cached on the webserver(s) - payments should be built in such a way that they are pluggable (configuration + OO), so that it will be easy to write/use modules for other payment providers (e.g. Ogone, iDEAL) - do you have any specific suggestions as to our idea for this website? Thanks for taking the time to look into this project and answer our questions. Kind regards, Jeroen