Hands-on assessment
Security expertise focused on the systems and workflows in your agreed scope.
API security testing
Check whether your APIs expose data or let users do more than they should.
Overview
REST and GraphQL APIs, mobile backends and integrations. ProcSecurity brings focused technical assessment, clear evidence and practical advice to your engagement.
Verified findings
Reproducible evidence that connects a technical weakness to its practical impact.
Clear next steps
Prioritised recommendations and direct support when discussing the results.
METHODOLOGY
An in-depth view of your application’s security.
Check whether your APIs expose data or let users do more than they should. We agree the scope with you, investigate the relevant controls and explain the results in context.
Access to records and privileged endpointsCheck record-level and endpoint-level permissions across users, roles and tenants.
Check record-level and endpoint-level permissions across users, roles and tenants.
API keys, tokens and authentication flowsExamine token handling, API keys and authentication flows for weaknesses an attacker could exploit.
Examine token handling, API keys and authentication flows for weaknesses an attacker could exploit.
Data exposure, input validation and business logicTest inputs, returned data and application workflows for security issues beyond the endpoint itself.
Test inputs, returned data and application workflows for security issues beyond the endpoint itself.
GraphQL queries and resource controls where relevantAssess GraphQL access controls, query behaviour and resource limits where they form part of the agreed scope.
Assess GraphQL access controls, query behaviour and resource limits where they form part of the agreed scope.
KEY FEATURES
Technical depth. Clear direction.
From the first scoping conversation to the final walkthrough, the engagement is built around useful outcomes for your organisation.
Agreed scope
The systems, access, objectives and testing window are confirmed before work starts.
Manual investigation
Experienced consultants examine controls and workflows in depth.
Business context
Assessment priorities reflect how the application is used and the data it handles.
Direct communication
Discuss the engagement and its findings with the consultant doing the work.
Useful evidence
Findings include the technical detail needed to understand and address each issue.
Remediation support
Work through recommendations and agree the follow-up needed to verify changes.
DELIVERABLES
Findings your team can act on.
A clear record of the assessment, with the evidence and guidance needed to move from understanding the issue to addressing it.
Assessment report
A report with verified findings and severity ratings
Technical evidence
Request and response examples for each issue
Remediation guidance
Practical remediation guidance
Follow-up verification
One retest after fixes are deployed
PLANNING YOUR ENGAGEMENT
Before we begin.
Clear scope, timing and expectations from the start.
What do you need from us?Share your API documentation, user roles and preferred dates. We’ll confirm any accounts, access or documentation needed during scoping.
Share your API documentation, user roles and preferred dates. We’ll confirm any accounts, access or documentation needed during scoping.
How much does it cost?Pricing depends on the agreed scope. We confirm the price and timeline in your proposal before work begins.
Pricing depends on the agreed scope. We confirm the price and timeline in your proposal before work begins.
GET IN TOUCH
Let’s discuss your requirements.
Tell us what you need assessed and when. We’ll help define a clear scope for your engagement.
contact@procsecurity.com ↗Prepare your enquiry below, then send it using your email app.