Web Application Security

SecuritySouls primary focus lies on finding missing security checks in the web applications which were missed-out by the application developers at the time of development. We find vulnerabilities and we try to exploit it without hampering the business. We document our findings while performing assessment on the applications, which would be more helpful for developers to understand about the vulnerability, reproduction steps, impact of vulnerability and mitigation steps.

We use organization standard SAST, DAST and IAST scanners to continuously find flaws in web applications. In addition to that we do also perform manual pentesting on web applications were we will be able to find high severity issues like business logic flaws, bypassing authorization checks, etc. which can be only found with the help of human intervention & methodology. We basically abide on security standards like OWASP, WASC, OSSTMM, NIST, CVE. We also have our custom owned classified pentesting methodology to perform VAPT on web applications to find critical bugs in the real-time applications.