Penetration testing services of traditional web applications, web services, and web APIs to identify vulnerabilities in application components. Converge’s consultants utilize common and custom tools to intercept and manipulate inputs, find and expose logic flaws or attack vectors, and simulate real world attack techniques to identify weaknesses at the application layer that might expose your company or customer data to unnecessary risk.

Converge’s penetration-testing methodology is based on components from NIST SP800-115, the Penetration Testing Execution Standard (PTES), and the Open Web Application Security Project (OWASP) Top 10. Converge maintains a separate, detailed penetration testing methodology document that is available upon request. The OWASP application security verification standard is leveraged as a baseline for testing the application components.

This penetration test will help you to identify potential vulnerabilities and provide prioritized recommendations for remediating findings.

Deliverables Converge will provide your organization with a detailed report of the high-level results, methodology used, narrative of testing, and detailed findings and recommendations. The report includes the following components:

• An Executive Summary section suitable for delivery to management that provides a high-level summary of the work performed and the key findings and recommendations.
• An application technical findings section primarily categorized using the OWASP Top 10 with a narrative of the testing performed, technical testing details, vulnerabilities identified, and recommendations for remediation.

Reports are reviewed by a technical peer and edited as part of a quality assurance (QA) process, and then delivered to the customer immediately upon completion of the QA process. Retesting of remediated findings is an optional component that can be added.