Captain's log: Doing the ship, restocking, resting, recruiting crew & other legal stuffs.
ASSESSMENT
Trust your App, Crush your Bugs
The Static and Dynamic Analysis Security Testing SAST/DAST are key tactical practice on Secure by Design, OWASP SAMM, SSDF, and other secure SDLC.
When assess your app you can: crack a 6-digit system in 30 min, find a 4-digit PIN in HTTP GET, steal a 50% discount for an asset worth 5 digits, take a occupied room in a 6-star hotel system, and more.
Despite nearly two decades of testing and observing, apps continue to defraud their owners.
You need to know that if you don't test constantly, your app will soon betray you.
Yeah! Our DAST is all WSTG, this includes logical flaws (those bugs on bug-bounties prizes)
SAST on Pre
Before to release, double-check those hotspots in your code with a hybrid analysis.
DAST on Pre
Thoroughly WSTG test against the whole entry-points in your app, one operation at a time.
DAST on Production
For customers who are in the process to learn the importance of incorporating DAST.
MAS
Designed to Production Enviroment, we test your mobile web app using OWASP MASTG