Services

Delivered on demand within a 40 technical-hour package, freely combinable. Engagement and scope are handled via contact.

Assessment & Analysis

Threat modeling and architecture analysis to map attack surfaces, risk vectors and recommended controls.

Manual source code review of web applications, focused on high-impact vulnerability classes.

Assessment of the security program's maturity and conformance against reference frameworks.

Python scripts to reproduce vulnerabilities and validate fixes.

Selection, deployment, configuration and tuning of application security tools.

Configuration, tuning and integration of static, dynamic and composition analysis into CI/CD.

Technical support for AppSec solution pre-sales activities.

Detailed documentation of findings, evidence, impact and remediation recommendations.

Technical guidance alongside development teams to fix identified vulnerabilities.