Software Security Services

All of our security consultants come from a software development background. Leveraging that experience, we can work with your development teams to provide a security perspective, enabling you to prevent exposure at the source: within your code. Regardless of where in the development cycle you are, we can help. We tailor our services to fit the needs of the client and all assessments deliver a risk based action plan with a clear path for remediation. Contact our sales team to discuss any of our software security service lines.

Requirements Review

Whether regulatory compliance, industry standards, or company policy is driving your functional requirements, our consultants will work with your team to ensure all security related requirements are identified and addressed.

  • Security Requirements Review
  • Requirement GAP Analysis

Threat Modeling

Identifying security flaws during the design phase will save your team time and money. Studies have shown the sooner an issue can be identified in the software development lifecycle, the cheaper it will be to remediate. A threat model is an intense, technical discussion with your development team to understand the application's architecture and identify software vulnerabilities at the time of design before code has been written.

  • Architectural Risk Analysis
  • Threat Modeling
  • Business & Logic Flaws
  • Design Review

Code Review

Peer reviews are valuable in identifying functional and implementation specific bugs; however, unless the review is targeted specifically for security and the reviewer has a deep understanding of application vulnerabilities, a peer review cannot substitute a proper security code review. We leverage both manual inspection and automated static analysis scanning tools to identify vulnerabilities in your application.

  • Code Inspection
  • Static Analysis
  • White Box Testing
  • Implementation Bugs

Security Testing

Application penetration testing is a powerful way to identify vulnerabilities within an application. A black box testing approach can examine an applications as it stands deployed and from the point of view of an attacker. During the penetration test, Praetorian will work closely with your business analysis, development, and quality assurance teams in quantifying risk and providing recommendations for each vulnerability identified.

  • Ethical Hacking
  • Dynamic Analysis
  • Black Box Testing
  • Penetration Testing

Secure Software Development

Praetorian is dedicated to providing whatever level of support is required for your specific needs. In the most involved case, our consultants can develop your application, in part or in full, from your functional design specification. By including security principles from the ground up, your application is more capable of scaling without compromising security in the future.

  • Application Remediation
  • Application Development
  • SDL Evaluation
  • SDL Development