Web application and server penetration testing and vulnerability remediation service

While companies today continue to move more and more of their mission-critical applications and data into web browsers, miscreants have a larger landscape to brew trouble. It is sad but true that many of the advantages that make online applications so convenient also make them incredibly insecure. As a result, hackers are able to use web applications to penetrate enterprises’ network and access private customer databases. The resulting identity and data theft has become a major concern for corporations and consumers alike. Appin's ancile service combats just this. We conduct a comprehensive assessment of the web application that identifies both inherent and potential security risks that might work as entry points for an attacker or hacker. Unlike normal software testing, security assessment of an application does not dictate a clear process flow. Tests to be performed are specific to the application and depend upon several factors like environment, technologies, programming language used for application development etc. Appin adopts standards laid by OWASP, PCI, FISMA methodology for Web Application and server Assessments.  Also, while Appin uses a mix of automated and manual approaches, it favours a mostly manual approach for penetration testing where most other vendors rely almost exclusively on automated tools that cannot go as deep into an application or exercise an application as an experienced security engineer. Our ethical hackers are trained exclusively in over 110 training centers we run over the world and posses over 53000 man-hours of combined experience in Penetration testing.

Scope

-Websites (Java, ASP, PHP)
-Web applications
-Web server/Public IP
-Email applications & server
-Mobile applications & server

Deliverables

-Vulnerability assessment report
-Exploit report
-Secured Code review
-Remediation report
-Remote vulnerability remediation assistance
-Remote vulnerability remediation assurance
-Regression audit to ensure clean health
-Certificate of CERT empaneled org accepted globally

List of applications

Airline ticketing website, Job portal, travel portal, media sites, Corporate intranet, Sales CRM, Industry-wise ERPs, SAP platform, Supply chain, Internet banking, Loan management, Credit card processing, Army wan apps, Project management app, Aviation CUTE/FITS, Shopping carts, payment gateways, university management, accounting, large data management, mobile payment, merchandise ecommerce, more