Assimilating the context: expert listeners
For the code audit to have the best result, it is necessary that we assimilate the context of the application, so our team of auditors has extensive experience in both the development of secure applications and audit projects on external applications.
In order to become experts in each application, we work closely with the development team, as they are the ones who best know the application structure and context.
Thanks to the experience accumulated in different types of projects, our team of auditors has defined a series of indicators that cover all the significant aspects of an application and, in particular, to analyze the possible security vulnerabilities that may exist, we follow a methodology based on the guidelines set out in the OWASP Code Review Guide 1.
Other types of audits
Pentest
A pentest consists on a computer security audit in which the company’s systems are attacked through the different breaches detected, analyzing the extent to which a real attacker could gain access.
Social Engineering Audit
The objective of this audit is to obtain confidential information from the company’s own employees without the employees being aware that they are compromising the company.
Wifi Audit
This audit analyzes the possible vulnerabilities of the company’s wifi networks, since sensitive company and customer data could be accessed through this network if it is not properly protected.