As part of our consulting practices, we provide services like application assessment, attack and penetration, application code review, product assessment, architecture and design review, threat analysis and mitigation etc. Some application security knowledge at the customer end is often a critical success factor to ensure their application security and we provide training through various application security courses addressing different levels in the customer organization.

»Application assessment and audit
This service encompasses thorough application assessment with zero knowledge. It starts with application foot-printing and ends with a list of vulnerabilities residing in your application layer. Our report will cover our methodologies, tools used, findings and remediation strategies. It helps in securing the application by following the remediation strategies. Follow up assessment to verify the security posture will also be done after the fixes are applied.

»Application pen-testing
The objective is to determine vulnerability in the application layer and to follow up with exploits. This gives the actual threat level and information exposure in your application layer. Once again this service is also with zero knowledge.

»Application code review
This service covers complete application code scanning from security point of view. The objective is to traverse through the entire application code base and to identify loopholes and possible security vulnerabilities. The report will contain findings along with the exact location of the issues for guidance to the developers. The development team can then take immediate action to rectify the issues. The code quality will be compared with secure coding best practices and the issues will be reported on this basis.

»Application architecture review and threat modeling
In the early part of the development lifecycle of an application it is possible to do a thorough architecture review. It is ideal to build a threat model at the architecture stage and use it during the rest of the development cycle. Such a model can provide guidance on various security controls that need to be addressed by developers to secure the application.

»Application Security Research and Development
We provide offshore development services for security products and tools to customers. This includes our own researched solutions. We build technology and components for application security assessment and defense solutions which can be integrated into our customers’ products.