All of Aatreya web application and penetration testing engagements cover the OWASP top 10. In addition, Aatreya goes deeper to assess the fundamental application logic, whilst also assessing the access controls that deliver security roles and user partitioning.

Aatreya also pulls in information from external sources such as Facebook, LinkedIn and Twitter, to provide social engineering and authentication based attacks vectors. Combining these approaches together provides customers with a much more holistic approach to web application security testing.

Aatreya carries out web application testing to assess the following elements of the OWASP Top 10:

The OWASP Top 10 is a strong starting point for web application testing, but organizations should really look to go beyond this. The underlying application logic needs to be tested. Websites need to be assessed with different classes of users, to ensure that appropriate partitioning and access controls exist. Content Management Systems (CMS) and administrative functions should be assessed and a series of broader controls should be reviewed and tested.

Application Testing Experience

Aatreya has tested a vast range of applications, from internal applications to external applications delivered over the internet and by mobile/cell phone.

Some of the applications Aatreya has tested include: