Challenges

  • Vulnerabilities found after release, when they cost more to fix

Scope

  • Secure development policy and standards
  • static application security testing (SAST)
  • dynamic application security testing (DAST)
  • secrets and key management
  • developer training

Deliverables

  • Secure development policy
  • scan reports
  • plan for embedding scans in the deployment pipeline

Target clients

Development teams in all sectors

Frameworks, standards & technologies

OWASP Top 10

Value

More secure software at a lower cost of fixing.

Success indicators (set with the client)

Vulnerabilities found before release compared with after · share of projects covered by scanning

Starting the engagement

Scope, deliverables, requirements and success indicators are agreed before delivery. Include the service name and code in your enquiry.

Client requirements

The catalogue specifies no additional prerequisites for this service. Access, stakeholders and the agreed scope are confirmed before delivery.