An ApplicationCheck assesses the possibility for an actor to attack an application or service. The check is performed by identifying vulnerabilities, configuration errors, information leakage, design flaws, or other types of attack vectors.
To ensure effectiveness, most of Security Office's ApplicationChecks are carried out as so-called White box tests, which entails full access to documentation, source code, testing and production systems, as well as access as both authenticated and non-authenticated users.
The result is a report describing all identifiable vulnerabilities, their possible consequences, and recommended countermeasures. Each vulnerability is given a risk score according to CVSS 3.1.
By periodically performing an ApplicationCheck, our customers test the resistance of their applications against attacks. In a digital environment, where the whole world potentially has access, it is vital to always be one step ahead.
Contact us for a consultation, and we’ll help you find the right solution for your company!