Subject to scoping
Web & API security
Access, data flows and sensitive operations, considered in their business context.
Start with the actual system
An application can expose a sensitive operation without an obvious visual defect. The proposed starting point is actors, resources and expected decisions: who may view, change or approve what, and under which conditions? The depth of the assessment and the resources required are agreed before an engagement.
Proposed deliverables
- Scope and authorisation to work
- Evidence-based findings and reproduction conditions
- Prioritised action plan and coverage limits
Scope and conditions
The responsible practitioner, skills, access and resources are confirmed during scoping. No ANSSI-qualified audit or exhaustive coverage is claimed.
THE STARTING POINT
Let’s discuss your system.
A context, a question, a need to clarify. Start with the scope.