Application Penetration Testing

CREST Accredited, Application Security Testing Specialists

Contact Us

Overview

Introduction

At 4ARMED we focus solely on application and cloud-based security testing. It’s probably something to do with our closet developerness. If you’ve got any kind of web or mobile application - perhaps a SaaS platform? - that needs security testing, look no further.

What is an Application Penetration Test?

An exploitative test of your application’s security defences. Sometimes referred to as “ethical hacking”, the goal of penetration testing is to assess the resilience of your web application to technical attacks and provide tailored recommendations on areas that could be improved. By using the same techniques as criminal hackers our consultants look for ways to gain unauthorised access to data stored in your systems…Read More

Security Testing Levels

Level 1 - Opportunistic

The target is reviewed for easy to discover, easy to exploit weaknesses, such as those found in the OWASP Top Ten, that would be targeted by opportunistic attackers that lack the resources, skills, motivation or time to pursue more difficult vulnerabilities.

Level 2 - Standard

The target is reviewed to see if it will withstand most security risks associated with today’s software. This level of testing is typically required for most enterprise systems, compliance standards and other platforms that handle sensitive information such as personal or financial data.

Level 3 - Advanced

This level is typically reserved for those systems that require the highest level of assurance, where a compromise could result in critical impact. At this level the types of threat are expected to be determined and potentially well-funded. Security testing alone is not sufficient to provide verification and we would look to review the system’s architecture, code, management processes and other supporting factors in order to provide deep insight into the system’s risk.

If what you need is something more targeted or bespoke, this is no problem. For example, you may have recently rolled out a new login function and would like assurance over just this element. All our engagements are built around your requirements so let us know what you need.