What is a web application penetration test?
Web application penetration testing is the practice of using a methodical process of searching for and detecting vulnerabilities in your web applications.
Similar to an infrastructure penetration test, the aim is to attempt to break into a web application using any penetration attacks or threats. Elements of a test include but are not limited to:
- Testing user authentication to verify that accounts cannot compromise data
- Assessing the web applications for flaws and vulnerabilities, such as XSS (cross-site scripting) SQL Injection
- Checking the secure configuration of web browsers and identifying features that cause vulnerabilities
- Testing the effectiveness of your Web Application Firewall
Our Web Application Testing includes:
- Web application penetration testing
- Mobile application penetration testing
- Secure code review
Web applications are at the heart of 73% of breaches, says Kaspersky.
Reporting
Once performed, we will produce a report of our findings, including the following three sections.
- Management Summary (Executive Summary)
- A non-technical outline of the findings and the number of issues/risks found. Includes and pass or fail of the test with a summary of findings with analysis of the risk versus the impact
- The technical details of the vulnerabilities found and the associated remediation
Get in touch with our team to discuss your requirements.
