product vulnerability assessment

Home
|
Cyber Security Services
|
Product Vulnerability Assessment

Home
|
Cyber Security Services
|
Product Vulnerability Assessment

product vulnerability assessment

Treating application & third party software as a black box

Our product vulnerability assessments are underpinned by our security vulnerability framework. The framework utilises a variety of open source and commercial tools that are integrated into your build pipeline, providing real-time detection and code level remediation advice relating to the following vulnerabilities:

Arbitrary forward
Authorisation missing
Blind SQL injection
Command injection
File download injection
HTTP header injection
Insecure direct object reference
Path traversal
Reflected XSS
Session ID disclosure
SQL injection
Stored XSS
Unchecked redirect
Unprotected APIs
Weak encryption algorithm
Weak hash algorithm

Depending on the technologies under inspection, our framework will also provide:

An application inventory analysis
Third party code analysis
Application topology
Data route coverage

Get in touch via cyber.security@sqa-consulting.com for more information.

On demand security vulnerability detection & code level remediation advice

Cyber Security SERVICES

cyber defence
planning

cyber
protection

cyber risk
management

PRODUCT VULNERABILITY ASSESSMENT

cyber security TESTIMONIALS

“The SQA Consulting entire security team is made up of RAF reservists, having seen them in action it’s no wonder they are seconded to support Government Cyber Operations”.

“The 5 day security training covered all manner of topics, I was not sure if I was elated or terrified once the training had completed. My team and I had no idea how vulnerable our systems and we are and how easy it was to exploit the smallest vulnerability”.

“I have never encountered security consultants who are as well informed as the SQA Consulting security team. They were and are a continued pleasure to work with”.

“Our CI/CD pipelines are now seamless running utilising Ansible, Contrast, SonarQube and Zap, and all reporting to a single repository. Something we were told was impossible. The speed at which these guys deliver is astonishing”.

“The security team at SQA Consulting are true SME’s with in-depth knowledge of the SDLC, technologies, process and governance. They deliver on time, every time, an nothing is to much trouble”.

“We had their bespoke security framework and processes audited by one of the largest global consultancies in the world as part of our acceptance process. It gives me great pleasure to say the feedback was this was one of the best security frameworks they had ever seen”.