Testing Methodologies
Testing is performed using two main methodologies:
Black-box Testing
External security assessment without prior knowledge of the system, simulating a real intrusion attack.
White-box Testing
Internal testing with access to system information, allowing for in-depth analysis and detection of more complex vulnerabilities.
What We Check
Security assessment is performed according to international standards:
● SANS Top 25 (full coverage)
● OWASP Top 10 (full coverage)
● PCI DSS 6.5.1–6.5.10 (full coverage)
● Authenticated user testing (MFA / SSO)
● API testing (REST / SOAP / GraphQL)
● Business logic testing
● Privacy assessment
We use multiple automated scanning tools and perform expert manual analysis based on real vulnerability exploitation practices.
Results and Reports
After testing we provide:
Management Report (LT and EN)
Clear summary with key risks, insights and recommendations.
Technical Reports (EN)
Detailed vulnerability descriptions, risk assessment and specific remediation plans.
1. Infrastructure Vulnerability Testing
We assess the security of networks, servers and IT infrastructure.
TESTS PERFORMED:
● IP address, subdomain and service scanning
● Operating system and vulnerability analysis
● Running services and configuration verification
● Password strength and policy assessment
Testing is performed both from outside (black-box) and with internal knowledge (white-box).
2. Web Application Security Testing (OWASP Top 10)
We test according to OWASP Top 10 methodology – the global standard for identifying critical security risks.
AREAS COVERED:
● Access control violations
● Security misconfiguration
● Software supply chain risks
● Cryptographic failures
● Injection vulnerabilities
● Insecure system design
● Authentication errors
● Data integrity violations
● Logging and monitoring gaps
● Error handling issues
3. Retesting
For critical vulnerabilities:
● We perform retesting after fixes.
● We verify that vulnerabilities have been effectively removed.
● We ensure that the system meets security requirements.
