Security

Because of our large experience in the field of internet software, security plays a crucial role in all of our development strategies.

Our security activities are put into practice on various levels:

• Global system security.
• CGI applications (UNIX or Windows) with special attention for form validation, user input, well-known exploits, shell commands, permission management, logs. 
• Client side scripts that may be executed in the user's browser as well as in emails. 
• Database online security, by taking backups, programming the API with focus on security, maintenance, log scanning, encryption. 

The following issues are studied for each security report:

• Does the website use heavy CGI activity ? 
• Are well-known exploits possible with scripts or operating system ? 
• How is form content checked ? 
• Is permission management correctly set ? 
• Which data can be sent to and received from the webserver ? 
• What are the consequences of a Denial-Of-Service attack ? 
• Is there a backup policy and disaster scenario ? 
• Does the possibility exist that users can execute shell commands ? 
• Is there a good password management ?
• Are logs scanned ? Does this happen manually or by means of scanning software ?