Application Security

Application security is an often-overlooked component of a security plan. Frequently, the pressure to get Web applications and other customized applications online quickly leads to inadequate security and testing. The Ciphent Security Team will thoroughly assess your applications, from both a technical and non-technical perspective, to identify all vulnerabilities and security concerns. The result is a detailed report of findings and specific code-level recommendations for remediating any vulnerability found.

Architecture, Design, & Modeling

Ciphent application architecture, design, and threat modeling services enable our customers to identify software security problems, before the software is even built. Software engineering studies have proven that approximately 80 percent of application security bugs and flaws are introduced during the early stages of software development lifecycle - often before even a single line of code has been written. Our methodology and approach can typically identify over 75 percent of the issues, thus enabling development teams to prevent implementing insecure code. Ciphent starts all sizeable code assessments with a threat model. Threat models help us manage the size of the code base we need to examine down to a much smaller scope, typically between 40 percent and 60 percent of the original code size, thus saving our customers time and money.

Web Application Penetration Testing

Web applications drive the Internet as we know it today. E-commerce, Intranets, widgets, and portals are all susceptible to Cookie Attacks, SQL Injection, Cross Site Scripting and Session Hi-jacking. The Ciphent team has a proven and rich background in developing secure applications from the ground up.

Source Code Reviews

Application security is only as good as the foundation it's built on. What causes an application to be vulnerable? Ciphent can answer this, along with many other questions, while on the way to reducing the number of software defects in your organization. Using both automated tools and human analysis, we work with your developers to provide best practices for application development. Ciphent begins source code analysis by reviewing the design documents, collecting information on libraries used and understanding the intended usage of the application. Based on this information, we will analyze all potential fundamental flaws and vulnerabilities in your application.

PCI Assessments

Ciphent Security Consultants are true experts in the PCI Data Security Standard. We can provide audit and assessment reports to help bring your applications and organization into compliance through a variety of assessment, remediation, and hardening services.

Application Hardening

Unlike most firms, we offer services that go beyond just testing. Our team can help you close the holes we find and train your development teams to ensure new vulnerabilities are not introduced into the code base.

Secure Software Development

Many organizations overlook the value of building security into their software during the development process. Ciphents methodology emphasizes security as a top priority rather than an afterthought. Hence, our methodology entails a comprehensive, end-to-end approach that integrates secure engineering, assessments, health checks, testing, and validation into the development process. The United States Department of Defense has leveraged our developmental services which stand as a true testament to our team, technology, and process.

Database Vulnerability & Architecture Assessments

Mission critical data and information, the crown jewels of your organization, are stored in databases 24/7. These databases are quickly becoming the favorite target of malicious insiders and external attackers. Your database platforms, from day one, are vulnerable to exploitation due to misconfigurations and vulnerabilities. Ciphent provides organizations around the world with industry leading vulnerability assessments of their database systems. We quickly and accurately help you assess your database vulnerabilities, prioritize and then fix your high risk threats while continuing to help you manage the security of your most prized possession; DATA.