Hands-on assessment
Security expertise focused on the systems and workflows in your agreed scope.
Web application testing
Find security weaknesses in your web application before they affect your users.
Overview
SaaS platforms, customer portals and internal applications. ProcSecurity brings focused technical assessment, clear evidence and practical advice to your engagement.
Verified findings
Reproducible evidence that connects a technical weakness to its practical impact.
Clear next steps
Prioritised recommendations and direct support when discussing the results.
METHODOLOGY
An in-depth view of your application’s security.
Find security weaknesses in your web application before they affect your users. We agree the scope with you, investigate the relevant controls and explain the results in context.
Login, password reset and session securityAssess sign-in, password reset, session handling and the ways these controls could be bypassed.
Assess sign-in, password reset, session handling and the ways these controls could be bypassed.
Access between users, roles and organisationsTest whether users can access other accounts, cross tenant boundaries or perform privileged actions.
Test whether users can access other accounts, cross tenant boundaries or perform privileged actions.
Business logic and sensitive workflowsExamine multi-step workflows for ways to misuse application features or bypass intended restrictions.
Examine multi-step workflows for ways to misuse application features or bypass intended restrictions.
Injection, cross-site scripting and related weaknessesManually investigate input handling and application behaviour, then verify the impact of identified weaknesses.
Manually investigate input handling and application behaviour, then verify the impact of identified weaknesses.
KEY FEATURES
Technical depth. Clear direction.
From the first scoping conversation to the final walkthrough, the engagement is built around useful outcomes for your organisation.
Agreed scope
The systems, access, objectives and testing window are confirmed before work starts.
Manual investigation
Experienced consultants examine controls and workflows in depth.
Business context
Assessment priorities reflect how the application is used and the data it handles.
Direct communication
Discuss the engagement and its findings with the consultant doing the work.
Useful evidence
Findings include the technical detail needed to understand and address each issue.
Remediation support
Work through recommendations and agree the follow-up needed to verify changes.
DELIVERABLES
Findings your team can act on.
A clear record of the assessment, with the evidence and guidance needed to move from understanding the issue to addressing it.
Assessment report
A report with verified findings and severity ratings
Technical evidence
Steps to reproduce each issue and guidance to fix it
Remediation guidance
A walkthrough with the consultant who tested your application
Follow-up verification
One retest after fixes are deployed
PLANNING YOUR ENGAGEMENT
Before we begin.
Clear scope, timing and expectations from the start.
What do you need from us?Share the application, user roles and preferred testing dates. We’ll confirm any accounts, access or documentation needed during scoping.
Share the application, user roles and preferred testing dates. We’ll confirm any accounts, access or documentation needed during scoping.
How much does it cost?Pricing depends on the agreed scope. We confirm the price and timeline in your proposal before work begins.
Pricing depends on the agreed scope. We confirm the price and timeline in your proposal before work begins.
GET IN TOUCH
Let’s discuss your requirements.
Tell us what you need assessed and when. We’ll help define a clear scope for your engagement.
contact@procsecurity.com ↗Prepare your enquiry below, then send it using your email app.