Web Application Security AssessmentWeb application security assessment of the configuration of critical web servers and identifies web vulnerability exposures.


Web application security techniques include manual review and evaluation using the best commercial tools available. We ensure application code is secure and web server configurations are hardened to improve the web security of important business marketing web sites and e-commerce web applications.


Value of Web Application Assessment


Reduces the risk to web attacks, persistent threats, malicious changes to your applications and reduce the potential for criminal activity that could affect your companies brand reputation

Web application security assessment in today’s vulnerability and threat landscape is an essential part of an organization risk management strategy and information assurance program.  Corporate websites are where potential clients get their first impressions, buy products and supply contact information.

Web servers are also your most vulnerable asset, since they are outside the protection of corporate firewalls and IDS most often in a public facing DMZ.  For this very reason it is critical to have web application and web security assessments performed when significant changes occur:


  • A new web site is added
  • When a web application or site has a major application release or change
  • Point Releases
  • Patch Release
  • Emergency release


Web application security assessments performed by Praetorian Secure at critical intervals identify potential weaknesses in web security due to incorrect configuration, weak authentication or known vulnerabilities.


Our Web Application Testing and Assessment


Praetorian Secure’s web application security assessment and web security assessments follow a consistent format that allows reproducible results and our tools are proven secure and accurate. Our web security assessments look for vulnerabilities like:


  • Injection
  • Broken Authentication and Session Management
  • Cross-Site Scripting (XSS)
  • Insecure Direct Object References
  • Security Mis-configuration
  • Sensitive Data Exposure
  • Missing Function Level Access Control
  • Cross-Site Request Forgery (CSRF)
  • Using Known Vulnerable Components
  • Un-validated Redirects and Forwards


Web Application Security Can Improve Compliance and Reduce Web Exploitation


Praetorian Secure realizes that are clients also have regulatory and internal web security assessment requirements. As fully qualified PCI-QSA ‘s and experts in regulatory compliance , Praetorian can assist with web compliance requirements of HIPAA, PCI – DSS, EI3PA, Sarbanes-Oxley, DIACAP, NIST or any other compliance requirement your company may have.


At Praetorian Secure, our primary function is to provide our clients with actionable results and deliver an assessment that builds awareness in the ever-changing IT security landscape. To schedule a consultation or take advantage of our client services, contact us today to discuss your project requirements.


Related information presenting business justification for web application security assessment: