Application Security Testing

The Rampant team of software security experts use industry standard Dynamic Application Security Testing (DAST) tools to thoroughly test your applications for security vulnerabilities, such as those described in the OWASP Top 10 list of critical web application vulnerabilities and the SANS Top 25 most dangerous software errors.  We also scan your websites and applications for indicators of compromise or malware.

We perform extensive manual testing on your application to identify vulnerabilities that application scanning tools are typically unable to identify such as stored XSS, security logic flaws, and weak account credentials.  We then perform penetration testing to confirm the vulnerabilities we discovered during both scanning and manual testing.  We take extra care to ensure we do not compromise the confidentiality and integrity of your data throughout our security testing process.

As part of our Monthly or Quarterly assessments, we will tell you what has changed since the last assessment.   Our report will tell you the new vulnerabilities we discovered, the vulnerabilities from the last assessment that were addressed, newly active web applications or services, and web applications or services that are no longer accessible.

The result from our assessment is a customized vulnerability assessment report that includes all of the information IT management needs, along with all of the details developers need to address the issues.  The report includes an executive summary of the activities performed, an overview of the methods and tools used, a summary of the overall results, a detailed list of the vulnerabilities discovered, and remediation guidance to address all vulnerabilities.