Model Threats

We will establish and acquire the information required to successfully define the scope of security penetration testing. This involves gathering information and completing an initial threat analysis to ensure that testing emulates the threats that are of real concern to the client.

Scan

We will plan the testing, the methodology is based on swift guidelines and OWASP standards for best practices. TOSH will use automated web application scanning tool to perform automated scans on this web application.

Manual Penetration Testing

The manual penetration testing stage is the core validation point for the previously identified weaknesses. Where appropriate, we will attempt controlled exploitation of the identified weaknesses to demonstrate risk and exposure. During this step, we will attempt to gain access to the company’s web applications from the internet to gather whole information.

Analyse Results & Reporting

During the reporting stage, we will analyse the results of both the above stage. By referencing these results we would understand the threat scenarios, to produce a final report containing the different areas of weakness found and the root causes for each weakness.