Cloud and application security
Cloud security assessment and penetration testing
You are moving to AWS, Azure or GCP, or launching an application, and need to know where you are exposed.
Service
Application security and penetration testing
We test your web applications and APIs, model the threats they face and deliver risk-rated reports with remediation your teams can act on.
What we cover
- Web application and API penetration testing
- Threat modelling and attack trees
- Verification against OWASP Top 10 and OWASP ASVS
- Assessment of secure development practices (OWASP SAMM, NIST SSDF)
- Security built into your DevSecOps pipelines
Approach
Our approach
Every mandate ends with a concrete deliverable: an assessment report, a target architecture, a roadmap or a delivered project.
Scoping
Business goals, scope, regulatory constraints and stakeholders.
Assessment
Gap analysis in the field, grounded in recognized frameworks.
Roadmap
Target architecture and an action plan prioritized by risk and cost.
Delivery
Hands-on support for your teams through go-live and handover.
Frameworks and tools
- OWASP Top 10
- ASVS
- SAMM
- NIST SSDF
- DevSecOps
Offerings
Related offerings
Cloud-native
Cloud-native application development
You need to ship a secure application or API, ready for Kubernetes.
Contact
Let’s talk about your next mandate.
Tell us about your context in a few lines. We reply within two business days.
- Emailinfo@obkoni.com
- Phone+1 438 799 4154
- Office
Sainte-Marthe-sur-le-Lac (Greater Montreal), Québec, Canada