Application Security Consulting
Making and keeping your own applications secure is no sinecure. Precisely because there are countless risks of vulnerabilities during the SDLC – Software Development Lifecycle – Cert2Connect has developed a program for application security in collaboration with its partners. It examines the entire process from development to production.
Every step in the process is vetted in terms of security. What tooling do developers use? Are third party services used? How is the application used? How are applications tested? Can applications land in production without being tested? Who or what determines when an application cannot go to production? Can we automate this review? How are the findings and proposals for fixes presented to the developers? What can we do with false positives and negatives? What does the devops street look like and how can it be improved?
