- What is Rapport?
- Why do I need Rapport if I have other security solutions?
- Do I still need my antivirus if I install Rapport?
- Is Rapport really free?
- If I am technically knowledgeable, do I still need Rapport?
- If I lack any computer knowledge, can I still use Rapport?
- Which attacks does Rapport protect against?
- What is the user experience?
- Which websites are protected using Rapport?
- Does Rapport store/send any information about me?
- Why does Rapport communicate with the outside world?
- Which operating systems and browsers are supported by Rapport?
- Can I install Rapport on my computer at work (where I'm not an administrator)?
- What is the difference between Rapport and SSL?
- Who is Trusteer?
- Join Trusteer's Customer Feedback program
What is Rapport?
Rapport is a security software application that provides online identity theft and online transaction protection for consumers. You can use Rapport to protect your web browser sessions with any website that contains private or personal information. Examples include:
- Online bank accounts
- Mutual fund accounts
- Online brokerage accounts
- Email (such as Hotmail, Yahoo! Mail, and Gmail)
- Social networking sites (such as Facebook, Myspace, Orkut, and Linkedin)
- Insurance applications
- Personal medical information
- Online merchants (such as eBay, Amazon, Walmart.com, and Target.com)
Rapport is entirely transparent and does not require you to change the way you work or sign into these websites. It does not require any configuration or maintenance; you simply install and browse safely. Rapport further protects specific identities and sessions. For a list of websites for which Rapport protects your identity and session, please refer to "Which websites are protected using Rapport?"
Why do I need Rapport if I have other security solutions?
Conventional solutions, such as anti-virus software, anti-spyware software, personal firewalls and anti-phishing toolbars, rely on a list of known bad behaviors (a.k.a. signatures, heuristics, and black lists). These solutions are becoming less effective for financial fraud and identity theft, and targeted attacks that use new, sophisticated techniques that go undetected by conventional desktop security solutions. These attacks are the most dangerous ones and can cause you serious financial damage.
| Solution | Detection Rate |
| Symantec | 23% |
| McAfee | 23% |
| Microsoft | 18% |
| Kaspersky | 44% |
| Sophos | 27% |
| eTrust | 10% |
Source: OITC. As of May 21 4AM EDT. For most recent data: http://winnow.oitc.com/malewarestats.php
Rapport's protection is based on a revolutionary technology that is entirely different from the technologies used by conventional desktop security solutions. Rapport protects your username, password, and other sensitive login information and prevents malware and fraudulent websites from stealing this information. Rapport also protects your online communication and prevents malware from tampering with your transactions (for example, transferring money from your bank account to the attacker's bank account)
If you bank, trade, or shop online, Rapport can significantly reduce your exposure to the growing threat of financial fraud and identity theft.
Do I still need my antivirus if I install Rapport?
Yes. Rapport does not replace your antivirus and is not an antivirus solution. It works differently and prevents attacks that your antivirus solution cannot detect or remove. Antivirus and Rapport are two complementary security layers and Trusteer recommends using both for maximal protection.
Is Rapport really free?
Yes. Full functionality for free. The entire cost was covered by the website from which you download Rapport.
If I am technically knowledgeable, do I still need Rapport?
Technically knowledgeable people may be less likely to fall prey to simple attacks such as phishing. However, some of the attack techniques that are widespread in the world today, such as pharming and man-in-the-browser, are very sophisticated and have become almost impossible to detect and prevent even for the most technical internet user.
Rapport provides an important layer of protection that is always "on" and continuously protects you against those attacks that cannot be easily spotted.
If I lack any computer knowledge, can I still use Rapport?
Absolutely! Rapport is extremely easy to use. There is absolutely no technical background or process required, other than installing Rapport with a few mouse clicks. Rapport does not require configuration, does not change the way you work, does not alter browser behavior, does not require anything from you, and unlike most conventional security solutions, does not ask you technical questions when it encounters a security threat. Rapport is the most powerful yet convenient security solution on the market.
Which attacks does Rapport protect against?
Rapport protects you against the following attacks:
Phishing
A phishing attack is when the attacker builds a phony website (the phishing site) that looks exactly like a website you know and trust (for example your bank's website). The attacker then lures you to visit the phishing website (for example by sending you a fraudulent email). When you arrive at the phishing website you mistakenly believe that this is the real website. As soon as you try to sign into the phishing website, the attacker grabs your login credentials and can now use them to login to the real website, impersonate you and initiate fraudulent transactions.
Pharming
A pharming attack is when the attacker causes your computer to go to fraudulent website each time you type a real website's name in your web browser address bar. The attack accomplishes this using various techniques such as infecting your desktop with malware or by compromising servers in your ISP's network. Once you arrive at the fraudulent website and try to sign in, the attacker grabs your login credentials and can now use them to login to the real website, impersonate you and initiate fraudulent transactions.
Keyloggers
A Keylogger is malicious software that hides itself inside your computer. The keylogger records keystrokes (i.e. each time you type something on the keyboard) and then sends this information to the attacker. By grabbing your sign-in credentials and other sensitive information and sending them to an attacker, keyloggers enable an attacker to login to your accounts, impersonate you and initiate fraudulent transactions.
Man in the Middle
Man in the middle is an advanced variation of Phishing and Pharming attacks. In this particular attack you sign into the website and start working all the while entirely unaware that all the information exchanged between you and the website is passing to the attacker. The attacker can view any private information and can alter your transactions. For example, if you request to transfer a certain amount of money to a specific payee, the attacker can change the payee's identity and have the money transferred to a different account.
Man in the Browser
"Man in the Browser" is malware that resides inside your browser in the form of an add-on (e.g. toolbar, BHO, browser plug-in). This malware controls everything that happens inside your browser. It is capable of reading sensitive information such as your sign-in credentials and passing them to the attacker. It can also generate transactions on your behalf, such as transferring money from your account to the attacker's account.
Screen Capturing
This term refers to malware that takes pictures of your computer screen and sends them to the attacker. Screen shots can include your account details, balance, and even credentials when the website uses keypads for login.
Session Hijacking
This term refers to malware that steals your session parameters with a specific website and sends this information to the attacker. These session parameters can then be used by the attacker to take over your session with the website and to bypass the authentication process that is required to log into the website.
What is the user experience?
Download and installation is very simple. A few mouse clicks and Rapport can be installed and running on your desktop in under 30 seconds. You do not need to register, you do not need to type anything or submit information and you do not need to restart your browser or reboot your computer. Click here to view a short demo of the installation process.
When you browse to a website in Internet Explorer or Firefox, the Rapport arrow appears in the browser’s address bar.
The Rapport arrow is green when Rapport is protecting your communication with the website:
And the arrow is grey when the communication is not protected:
Rapport comes preconfigured to protect certain websites who are working directly with Trusteer to give their valued customers the best protection possible.
Of course, you should have Rapport protect you on all websites where you login or where you can read or send sensitive information. You can add Rapport protection to any website with just two clicks. Click here to view a short demo.
With Rapport, no pre determined settings are altered, no changes are implemented, and you encounter no interference with your online activity.
When Rapport identifies a security hazard it usually neutralizes the threat without having to inform you. In a few cases where Rapport detects some level of risk, Rapport may require a confirmation (i.e. Yes/No) from you before neutralizing the threat.
Which websites are protected using Rapport?
Rapport protects select online banking, brokerage, and retail websites. Currently the following websites are protected by default: ING DIRECT, and Muriel Siebert. New websites will be added in the future and your version of Rapport will be updated automatically. You can choose to manually protect additional websites by browsing to a website, clicking the gray Rapport arrow and choosing "Protect this website".
Does Rapport store or send any information about me?
Rapport creates an encrypted signature of your credentials on your computer. This information cannot be used to retrieve your credentials and is used by Rapport to identify any unauthorized leakage of your credentials. Rapport sends anonymous reports about security events and internal errors to a central server. This information is used to improve the product and the policy. You can specifically instruct Rapport not to send out any information.
Why does Rapport communicate with the outside world?
Rapport communicates with Trusteer's central policy server to receive automatic software and policy updates. Additionally, Rapport sends anonymous reports about security events and internal errors to a central server. This information is used to improve the product and the policy. You can specifically instruct Rapport not to send any information.
Which Operating Systems and Browsers are supported by Rapport?
Rapport currently supports Windows XP and Windows Vista running Internet Explorer 6, 7, or Firefox 2,3
Can I install Rapport on my computer at work
(where I'm not an administrator)?
Yes, you can. Rapport can be installed even when you do not have administrator privileges. The best way to install software at work though is to contact your system administrator and request adding Rapport to your desktop computer.
What is the difference between Rapport and SSL?
Rapport and SSL are complementary protection layers, performing different internet security duties. SSL protects the information flowing between you and the web site you are browsing, by encrypting the communication channel you use. SSL protects communication and runs on both your computer and the site you are browsing. Rapport prevents identity theft, which can be done regardless of the security of your communication channel (i.e. even if SSL is used). Rapport protects your sensitive personal information, and runs only on your computer.
Who is Trusteer?
Trusteer enables online businesses to establish a secure communication tunnel with their customers over the Internet that stretches from user’s keyboard into the company’s website. Trusteer’s flagship product, Rapport, allows online banks, brokerages, retailers, and healthcare organizations to protect their customers from identity theft and financial fraud. Trusteer is a privately held corporation founded by senior Internet security industry executives with specific expertise in enterprise and consumer desktop security. Trusteer is well financed by U.S. Venture Partners. In 2008 Trusteer won the "Best of Web" award from the Online Banking Report and was covered by U.S. analyst firms Gartner and Frost & Sullivan.
Join Trusteer's Customer Feedback Program
Users who want to help us improve Rapport are invited to join the Trusteer Customer Feedback program. Program members have access to new versions before all other users and are exposed to new product directions and features . Members are requested to reply to occasional short questionnaires regarding product directions and new versions. Participation in this program is free.Click here to join the program