Our Approach
-
Gathering information
Information gathering aims at understanding the audited perimeter and obtaining inputs to execute security tests.
It is performed at the beginning of the project, and then potentially on an ad hoc basis if new information emerges during subsequent testing. -
Lowering the risk
We use the information collected in the previous phase to perform cyber attacks. Those aim to detect vulnerabilities in the audited resources (websites, mobile applications, servers, etc.).
The vulnerabilities are analyzed, categorized and prioritized depending on their criticality and exploitability. -
Continuous security
Once the risks have been identified, we follow up on the corrective measures and verify the desired level of security through our continuous security services as opposed to spot tests.
