Application Security
MODERN APPLICATION SECURITY SPANNING THE FULL SPECTRUM OF THREAT VECTORS
Application security best practices
We prioritize security, because our security is your security. We’re ISO-2700 compliant, so you can be confident that the web and mobile solutions we build for you protect your data, improve your ability to achieve compliance, reduce your risk from cyber threats, and build greater resilience with evolving threats. Our dedicated Security Practice, staffed with security domain experts, ensures we adhere to best practices throughout the full software development lifecycle, starting at the very beginning. In fact, all of our developers undergo extensive application security training through the Open Web Application Security Project (OWASP)—a worldwide organization focused on improving the security of software. They also collaborate with our Secure DevOps teams to jointly develop secure application architecture and deployment environments for web and mobile apps based solely on your current and future needs—not the latest, buzzy solution.
Security built from the start
“Build security from the start” is the mantra for all of our Gorillas. Using the Agile methodology, we address every conceivable security issue throughout the application development process. We also test and evaluate our applications according to our clients’ applicable compliance mandates such as HIPAA and PCI DSS. This allows us to identify and mitigate potential security vulnerabilities early, maintain project timelines, and deliver secure, compliant applications.
Vulnerability scanning and remediation
Vulnerability scanning is an essential first step in building a viable cyber defense. Gorilla Logic uses a broad portfolio of technologies such as Fortify and Veracode to detect, classify, and address system weaknesses—ensuring the security of your applications.
Identity and Access Management (IAM)
The bar has been raised on application identity and access management. Companies can now leverage a variety of identity and access management tools, including sign on via social media handles such as Facebook and Twitter, and single sign-on (SSO) with SAML and OAuth. Gorilla Logic uses trusted identity and access management solutions that mitigate risk while providing seamless access to valid users.
Application penetration testing
In addition to scanning code for vulnerabilities, Gorilla Logic runs penetration tests against running applications. These penetration tests verify the strength of your production configuration while providing an additional layer of defense. This ensures that no new vulnerabilities have been introduced since the last code scan.