Application Security
Understand your application. Find the gaps.
We review web apps and APIs for OWASP Top 10 risks, authentication and access control.
2 services
Find application security gaps.
-
Application security review
A defined review of a web application or API: the OWASP Top 10, authentication, authorisation, access control, dependencies and configuration.
From MVR 5,000Optional maintenance quoted separatelyPossible scope
- OWASP Top 10 review
- Authentication testing
- Authorisation and access-control testing
- IDOR and object-level authorisation checks
- Dependency and configuration checks
- A written report of findings
A security review, not a full penetration test and not a red-team engagement. Manual penetration testing is scoped separately through SkullSploit, and the scope of any testing is agreed in writing first.
-
Exploit development & security research
SkullSploit is our offensive-security arm: exploit development, vulnerability research, and finding out how software actually breaks.
Research and engagement scoping happen at SkullSploit, not here. We do not advertise testing on this site that we are not currently set up to take on.
Worried about something specific?
Describe what's going on and we'll find the right service.
Start a project
contact@