Call us:    +44 (0) 207 0439 349        Company      Contact us

OWASP Website Penetration Testing

OWASP stands for Open Web Applications Security Project, and is an open-source collaboration of web based security tools, technologies and methodologies from industry leaders, educational organisations and individuals from around the world. The aim of OWASP is simple; help people with a useful and clear resource of tools and documents to help understand web application security to better protect themselves online. The OWASP Top 10 2014 has currently not been published however it will likely follow the same principle categories as the previous years results.

What is OWASP Top 10?

OWASP collects data from successful web application attacks and uses this data to produce the OWASP Top 10 statistics. The OWASP Top 10 refers to the top 10 web attacks as seen over the year by security experts, and community contributors to the project.

OWASP Website Penetration Testing

We can perform website penetration testing against your site for the OWASP Top 10 security threats, ensuring you are all clear of vulnerabilities. The latest OWASP top 10 2014 threat list includes the following methods of attack:

A1 Injection
A2 Broken Authentication and Session Management (was formerly 2010-A3)
A3 Cross-Site Scripting (XSS) (was formerly 2010-A2)
A4 Insecure Direct Object References
A5 Security Misconfiguration (was formerly 2010-A6)
A6 Sensitive Data Exposure (2010-A7 Insecure Cryptographic Storage and 2010-A9 Insufficient Transport Layer Protection were merged to form 2013-A6)
A7 Missing Function Level Access Control (renamed/broadened from 2010-A8 Failure to Restrict URL Access)
A8 Cross-Site Request Forgery (CSRF) (was formerly 2010-A5)
A9 Using Components with Known Vulnerabilities (new but was part of 2010-A6 – Security Misconfiguration)
A10 Unvalidated Redirects and Forwards

OWASP Testing Methodology

We have been security testing websites for years and use a variety of in-house checklists we’ve created through experience gained in the industry. To get an overview of testing procedures and and what we do, please have a look at this OWASP testing checklist, which is one of a few good guidelines for web testing that we follow.

If you are interested in getting a website or web application OWASP penetration test to check for the above vulnerabilities get in touch with us. We offer a range of website and OWASP web application security testing services to help mitigate threats to your web facing services and applications. You may wish to consider our website security testing service that checks for all of the OWASP top 10 vulnerabilities.

Registered Memberships and Partners:

OWASP - Open Web Applications Security Project
ISSA UK - Information Systems Security Association UK
NIST - Computer Security Division of NIST
UKITA - UK Information Technology Association
ISF - Information Security Forum
ISACA - Information Security Audit & Control Association

  • Latest Tweets

    • Almost 6,000 web shops are unknowingly harbouring malicious code that is stealing the credit card details of customers, suggests research.

    • TalkTalk has been fined a record £400,000 for poor website security which led to the theft of the personal data of nearly 157,000 customers.

This website uses cookies to improve user experience. By using our website you consent to all cookies issued by this website. I agree Disagree