Are you about to deploy a new application or upgrade an existing one?

Are you concerned about its security?

You may believe you are secure because:

• Your Firewalls secure your network from the outside
• Your Intrusion Detection System stops hackers in their tracks
• Your Servers are security hardened and have all the latest patches applied
• Your Customers are protected because you use secure communications (SSL/https)

But your Web Applications are opened to the world:

• The Firewalls let web traffic though to them
• Your secure communications mean your Intrusion Detection Systems cannot view the encrypted web traffic and therefore cannot detect intrusions

So, how secure are your web applications:

• Have they been developed with strict security requirements in place?
• Were they implemented following all the security best practices?
• Are they regularly reviewed against current security best practices?
• Do they contain legacy or bespoke components?
• Are they the latest versions offered by their vendors?
• Were they developed or maintained by 3rd parties?
• Were debugging or support tools installed with the applications?

Web applications are now the target of professional criminals and bedroom hackers alike. If you were hacked what would the damage be:

• Loss of customers
• Sharp decline in share price?
• Regulatory penalties?
• PCI penalties / higher charges?
• Customer lawsuits?
• Media attention and damage to your brand?

Independent researchers, Ponemon Institute, have placed an average cost of £4.1m for an application security breach of just 30,000 records, and from scans of 31,373 sites, over 85% showed a vulnerability that could give hackers the ability to read, modify and transmit sensitive data (Web Application Security Consortium).

Clearly, it’s not just your reputation or job that’s on the line – it’s potentially your entire business. Every day, the media is reporting more and more Web Performance and Security issues, some so vicious that they close the victim companies down.

Test and Go is a new service from StarBase that gives you access to industry leading performance and application security testing without the hassle or cost usually associated with getting it right.