03330 500 111 hello@evalian.co.uk
Client Portal
REQUEST FREE CONSULTATION

Web Application Penetration Testing

Whether you develop or utilise web apps, regular web app testing is essential to protecting your data.

We provide web application penetration testing in accordance with OWASP methodology to identify vulnerabilities that an attacker could use to compromise the application and access its data.

Our experienced consultants can test your web app security and provide a detailed report and remediation guidance.

We’ll also provide a free retest for peace of mind.

REQUEST MORE INFORMATION

03330 500 111

hello@evalian.co.uk

Our Accreditations

37838 Crest logo Refresh 2022 RGB 2 AW Col
CREST Accredited for Pen Testing Evalian
Vulnerability Scanning Evalian
OVS Mobile Accredited Evalian
OVS Apps Accredited Evalian

Our Approach To Web App Testing

Data Mapping

Test Scoping

We'll help you determine the right tests and scope based on your objectives

Evalian Assessment

Proposal & Quote

You'll get a written proposal and quote tailored to your requirements

DPIA

Statement of Work

We'll prepare an SoW covering testing deliverables and prerequisites

End Point Build Assessment

Testing Work

Your tester will deliver the work, staying in contact with you throughout

ICO

Detailed Report

You'll get a detailed report setting out our findings and recommendations

DPO

Post Test Debrief

We'll arrange a call to discuss our report and answer your questions

Mobile application Testing

Remediation Advice

We'll remain available to you to provide remediation advice and guidance

Vulnerability Assessments

Free Retest

When you've fixed the issues identified in the test, we'll retest them for you

Testing Methodology

Reconnaissance & Information Gathering

We’ll start by gathering open-source intelligence about the application to be tested, in the same way an attacker would.

Application Testing

Your tester will assess the application in accordance with the Open Web Application Security Project (OWASP) testing methodology, covering the following areas:

  • Configuration and Deployment Management
  • Identity Management
  • Authentication
  • Authorisation
  • Session Management
  • Input Validation
  • Error Handling
  • Cryptography
  • Business Logic
  • Customer Side Testing

Testing Includes

Depending on the agreed pen testing scope, our web app testing activities will include the following and more:

App & Host Fingerprinting
App Enumeration
Web Leakage Review
Configuration Testing
HTTP Testing
Identity & Role Testing
Credential Testing
Authentication Bypass Testing
Authorisation Bypass Testing
Privilege Escalation Testing
Session Management Testing
Cross Site Forgery Testing
Cross Site Scripting Testing
SQL Injection Testing
Other Injection Testing
Buffer Overflow Testing
Error Code Testing
Encryption Weakness Testing
Data Validation Testing
Integrity Check Testing
Malicious File Testing

Your Web App Testing Consultant

Evalian provides web app penetration testing, security assessment and data protection services to organisations of all sizes in the UK and globally.

We are certified to ISO 27001 and ISO 9001 and CREST accredited for penetration testing.

If you need a quote, example reports, or just want some advice we’d be pleased to help. Contact us today for more information.

Ningi Testimonial Pen Testing

Need some help understanding the information on this form? Visit our guide to scoping a penetration test.

Ningi Testimonial
Interscientific David Lawson
Vistry Testimonial
Beryl Testimonial
Eploy testimonial
ISO Consultancy CopyBet
BES Testimonial
icon

Need Testing Advice?

Contact us now for a friendly, no-obligation discussion or to request more information about our penetration testing and security assessment services.

Contact Us