We take the security of ZEBSOFT seriously, we understand the need for official security assessments and penetration testing from reputable third parties.
In November we contracted an independent 3rd party to carry out infrastructure and penetration testing against ZEBSOFT.
The following areas were tested:
Host Infrastructure Testing
| Test Category Name | Assessed |
|---|---|
| Authentication | Yes |
| Authorisation | Yes |
| Configuration | Yes |
| Cryptography | Yes |
| Information disclosure | Yes |
Application Testing
| Test Category Name | Assessed |
|---|---|
| Authentication | Yes |
| Authorisation | Yes |
| Business logic | Yes |
| Configuration | Yes |
| Cryptography | Yes |
| Information disclosure | Yes |
| Input validation | Yes |
| Insecure functionality | Yes |
| Session management | Yes |
