Scope of checks
For websites and applications developed by ALMOUSA, within the agreed project scope and assets we are authorized to work on.
- Define authorized assets and environments, data sensitivity and misuse scenarios before assessment.
- Review code, configuration, authentication, authorization, inputs and dependencies against suitable verification requirements such as OWASP ASVS.
- Remediate findings by impact and retest them while checking core journeys for regressions.
Recording tests and fixes
- An assessment scope, asset list and agreed verification requirements.
- Findings with sanitized evidence, priority and reviewable remediation steps.
- Remediation, retest results and a record of residual risks and untested items.
Limits of this practice
We do not offer standalone penetration testing or cybersecurity services, or assessments of third-party systems outside our development projects. Quality checks are not security accreditation or a guarantee against compromise. Agreed scope, permissions and applicable regulatory requirements remain necessary.