OWASP Top 10

• Injection
• Security Mis-configuration
• Broken Authentication
• Cross Site Scripting (XSS)
• Sensitive Data Exposure
• Insecure De-serialization
• XML External Entities (XXE)
• Using Component with Known Vulnerabilities
• Broken Access Control
• Insufficient Logging & Monitoring

100% Security does not exist. We fix, find and remediate what we can.

Vulnerability Types

1. Object Access Vulnerabilities

When people can access data not meant for them.

• Presentation Layer Control - Client side safety. Only showing safe options to the user. Making unsafe ones hard to find. A weak form of protection.
• Server Side Control - Server side safety. Checks values as they are recieved. Stronger form of protection.

Causes