Arc consultancy

Website Security Audit


Website Security Testing, Web Application Security Audit, Penetration Test

Emulating the approach used by hackers, Arc Solutions website security testing and web application security audit performs a controlled real-life evaluation of your web applications, websites, and web servers.

Our experts evaluate your systems for over 35,000 types of vulnerabilities including SQL injection, authentication, encryption, buffer overflow, cross site scripting, web server configuration issues, and many others. Our website security testing and web application security audit report identifies specific vulnerabilities and provides detailed instructions to mitigate or eliminate each risk.

Arc benchmarks your organization against a number of security control frameworks and related guidance including NIST, ISO 27001,NIC, etc.


Web Audit – Security Analysis Approach

Under this type of web audit approach, the web application is analyzed for usual weaknesses that are associated with a greater impact on the system security.

  • A1: Injection
  • A2: Broken authentication
  • A3: Sensitive Data Exposure
  • A4: XML External Entities (XXE)
  • A5: Broken Access Control
  • A6: Security Misconfiguration
  • A7: Cross-Site Scripting (XSS)
  • A8: Insecure deserialization
  • A9: Use of components with known vulnerabilities
  • A10: Insufficient Loggint&Monitoring