Mobile and Web-Application-Security

The programs that make every smartphone truly usable are also an indispensable part of the business world. Most companies use well-known apps to communicate with their employees. And many employees use apps for their daily work. Just as many companies offer their customers their own apps. Especially in the area of health insurance and banking, having your own apps is the standard today. Often these apps exchange sensitive data with server systems in the background. Secure data exchange is essential here.

If you are planning to use an app from the App or Play Store, @-yet will thoroughly check this app for you. You will then receive a detailed report that takes into account all aspects of security. In particular, the @-yet team will thoroughly examine secure data storage on the iOS or Android devices themselves, the external interfaces and communication with any backend systems.

If you have developed an app yourself and would like to make it available to your employees or customers, @-yet can help you make your application more secure. Our security experts evaluate the source code of your applications using manual and automatic code checks to identify insecure code patterns or implementation errors. The security of the data stored on the devices is also subjected to intensive testing. And a look at existing interfaces reveals whether the app is transferring sensitive data to the back-end systems in a secure manner.

Without modern web applications, many services would be virtually unthinkable. Managing customer data yourself, ordering in an online shop, taking out insurance online – these are just a few examples of how web applications optimize business processes or even make them possible in the first place. These services can also be realized with mobile apps, which have a lot in common with web applications. Nevertheless, @-yet security experts still consider web applications separately.

The @-yet analyses not only cover the web applications themselves, but also the underlying technology. This includes, for example, the configuration of the web server. The analysis also examines errors in the logic of the applications and checks for vulnerabilities in the authentication process. In addition, @-yet performs automated and manual penetration tests to simulate realistic attack scenarios. If a vulnerability is found, @-yet experts attempt to access the underlying systems and thus check what damage the exploitation of the vulnerability in question can actually cause. After all, the ultimate goal is to ensure the security of the backend systems and the data stored on them.

It is often the details that determine the security of an application. Input data is insufficiently checked, data is transmitted unencrypted or stored on the end device without appropriate security measures. Even hard-coded access data for communication with backend systems are security-critical errors that are repeatedly found by @-yet teams. All these vulnerabilities not only jeopardize the availability of the applications themselves, but are primarily a risk for the sensitive data stored on the underlying systems. Thus, insecure apps are often also a danger to the data of all users.

@-yet helps you to identify and eliminate security-critical vulnerabilities. Using standardized testing guides and generally accepted test procedures, @-yet's security experts thoroughly and reliably test every mobile app and web application.

Self-developed smartphone apps or web applications can have vulnerabilities. This also applies to apps from the App Store or Play Store. Manual and automatic checks reveal insecure code patterns or errors in the logic. Penetration tests simulate attack scenarios and check secure data transmission via existing interfaces. The aim is to protect the data stored on the devices or in the backend.

• Comprehensive code and logic checks
• Verification of secure data storage on the mobile devices
• Automated and manual penetration tests
• Technical analysis of web servers, interfaces and backend systems
• Detailed final report

• In-depth experience with current technologies through numerous analyses
• Review of every app or web application
• Ensuring the secure transmission and storage of sensitive data
• Comprehensive and detailed analyses through manual test procedures
• Raising your developers' awareness of secure coding