Your basket is currently empty.
Account
United Kingdom
Select regional store:
The security of web applications is of paramount importance to business continuity and integrity. While traditional firewalls and other security controls are an important security layer, they cannot defend against or alert you to many of the attack vectors specific to web applications.
This Web Application Penetration Test contains a mix of advanced manual testing techniques and automated scans to simulate real-world attacks to identify risks within your web applications.
It will assess:
Download the full service description
At the end of the test, you will receive a comprehensive report broken down into:
High-level, non-technical summary of your business’s risks.
Detailed description of the methodologies followed and the scope of testing.
Overview, consultant’s commentary and detailed descriptions of each technical vulnerability identified and remediation advice.
Download the full service description
This test will be performed using IT Governance’s proprietary security testing methodology, which is closely aligned with the SANS, OSSTMM (Open Source Security Testing Methodology Manual) and OWASP (Open Web Application Security Project) methodologies.
This service is suitable for organisations that have a public-facing web application.
A single web application will be tested from an unauthenticated perspective. The web application must only have basic dynamic functionality, such as contact us forms, search fields and login pages. If a web application firewall is enabled, then whitelisting will need to be implemented.
For multiple web applications, authenticated testing or more complex functionality, please contact us for a custom quote.
“It has been an absolute pleasure working with IT Governance, they made the process from start to finish so straight forward. Loreta explained everything to us and guided us through the process and Peter, who conducted the testing, was helpful and extremely knowledgeable. We will be coming back to IT Governance for all future security testing.”
- Heather Gardner - Trisoft
“I would like to express our appreciation for the excellent job Ross Higgins has done pentesting our application.”
Identify and understand the technology-related vulnerabilities affecting your web applications and APIs, and the business impacts these present.
Demonstrate a strong security posture to clients by providing third-party assurances that your web applications are secure.
From the detailed report, you will be able to implement secure measures (such as strong authentication and session management controls, and keeping untrusted data separate from commands and queries), thereby reducing the likelihood of a security breach while protecting your brand.
Supports compliance with ISO 27001, the UK DPA (Data Protection Act) 2018 and the GDPR (General Data Protection Regulation), the PCI DSS (Payment Card Industry Data Security Standard), and other laws, regulations and contractual obligations.
Our expert consultant will provide you with updates throughout the project from both technical and non-technical perspectives.
Our established UK penetration testing team has amassed extensive testing experience that ensures clients receive a comprehensive service.