Penetrationtest Certificate#5e98082667

Certificate

Only companies whose applications, systems or infrastructures have been tested receive this certificate. This proof is to be understood as a snapshot and serves as evidence of the best possible protection against third parties.

Delimitation

Security audits are snapshots and serve as evidence of the best possible protection for the respective assets. Side-channel attacks or zero-day attacks still represent a risk. This certificate is only awarded to companies whose tested applications, systems or infrastructures have no critical vulnerabilities and have achieved a good to very good result.

Objective

This analysis looks at a web service or infrastructure that is accessed over a network (e.g., the Internet) and via (HTTP or HTTPS-based). The analysis includes a brief review of the services that can be accessed on the systems and the upstream protection functions (e.g., a firewall). Furthermore, the analysis is performed according to the OWASP Testing Guide 5.0 and thus also takes into account the current OWASP Top10 vulnerabilities.