Web Application Security Testing
iViZ web applications & website security testing is a comprehensive penetration testing of web applications and websites. Over 75% of the threats are funneled through applications. If you have either internal or public facing internet applications, it is best to test them periodically to see if you are vulnerable to attacks like Injection flaws, Cross Site Scripting, Domain Name Poisoning to name a few. Protect your confidential and sensitive information & database by finding and fixing threats before you are attacked.
What will be tested?
- E-Commerce Websites
- Hosted web applications
- Customer/Partner portals
- Hosted Enterprise applications
- Custom applications
How is the test conducted?
The test is conducted from our “in-the-cloud” SOC (Security Operations Center) over the Internet. Customers are required to provide secure access to the network segment during the test.
Type of tests conducted?
- OWASP Top 10 vulnerabilities testing
- ALL 26 WASC classes of vulnerabilities testing
- Over 100,000 tests
What are the deliverables?
- Comprehensive Test Report with details of vulnerabilities
- Detailed remediation recommendations
- Proof of exploitation (as applicable)
- Vulnerability management portal access
What is the test frequency?
You can sign up for one-time or annual packages starting from unlimited or quarterly test frequency.
|
Web Application Security Testing Packages
Details – WASC Coverage