SECFORCE          
   
HOME COMPANY SERVICES RESEARCH BLOG NEWS & EVENTS PRESS OFFICE CONTACT
 
    Application Assessments  
    Home : Services : Application Assessments  
   

Application security tests target bespoke software developed to perform vital business processes. SECFORCE provides a range of application testing services that are designed to be introduced into the software development life cycle to ensure the security of the application, systems its data.

Web Application Penetration Testing
Web application security represents a significant development challenge due to its inherent complexity. Learn how SECFORCE web application testing will identify vulnerabilities in application logic to ensure systems are resistant to attack.

Client Based Application Penetration Testing
The nature of client-server applications introduces new threats which need consideration during a security assessment. Multiple APIs, different network protocols and numerous levels of trust make these applications highly complex and difficult to secure. Testing needs to take a threat modelled approach to ensure that all attack vectors have been considered and are comprehensively tested.

Source Code Review
Source code review is a process of investigation which uncovers security vulnerabilities in the source code of an application. This is a highly effective technique for identifying and remediating coding vulnerabilities early in the development lifecycle.

Application Threat Modelling
Application threat modelling is a reliable and repeatable methodology utilised to identify threats to confidentiality, integrity and availability of your system or data. Usually performed early in the development lifecycle, threat modelling will highlight areas where trust boundaries need to be effectively implemented, and give invaluable information and security guidelines to the development team at the early phase of code development.

Network Protocol Fuzzing
Network protocol fuzzing is a vulnerability discovery technique which involves manipulating a network protocol to evaluate the robustness of its components. This is very effective in identifying risks to bespoke products where proprietary communication protocols are utilised.

 
SERVICES
Infrastructure Assessments
Application Assessments
Web Application Penetration Testing
Application Penetration Testing
Source Code Review
Application Threat Modelling
Protocol Fuzzing
Consultancy
You may also be interested in downloading the following documents:
Penetration Testing Brochure
Penetration Testing Case Study
SDLC Security Case Study

 
  Copyright (c) 2012 SECFORCE Ltd
All Rights Reserved
Suite 11, Beaufort Court, Admirals Way
E14 9XL London
SECFORCE is CREST certified. Click on the logo for more informationISO9001+44 (0) 845 056 8694