Description of the services of security audit

Safety audit of source code (white box)

The analysis of the source code is preferentially carried out manually by our experts. In our judgement, it is considered the most effective because it is possible to find the maximum quantity of vulnerabilities and errors of logic of application.

Site security audit (black box)

This type of audit is also called pentest. The main task - to simulate the action of the attacker and in practice to evaluate how effective the measures used to protect; while the source code is not available or provided some code snippets on request. In penetration testing, we use commercial products IS (security scanners), as well as their own design.

Audit server security

Search of bottlenecks in settings of the server, its services, libraries, setup of access rights of a Web server, search of traces of cracking, cleaning out of the malefactor from system, assistance in localization and a vulnerability patch, the recommendation about lowering of risks of hacking.