PHP Security Audit

During the security audit, Ibuildings will help you identify barriers to full security of your PHP application. You will be provided with options for removing those barriers and optimising the security. When your application is assessed by experienced PHP consultants, the underlying cause of security problems can be quickly identified, and then addressed.

The Process

The PHP Security Audit begins with a detailed evaluation of your application, taking into account everything from usage volume to the operating system. All items are evaluated relative to predefined benchmarks. Once the application has been reviewed, the data will be analysed, issues identified, and recommendations developed.

What We Look For

Below are sample components for the Security Audit:

• Penetration testing
• Cross site request forgeries
• PHP Configuration analysis
• JavaScript vulnerabilities
• Output analysis
• Denial of service analysis
• Input filtering analysis
• Header injection
• SQL injection
• Script security analysis
• Dirty data analysis
• Session security
• Cross site scripting vulnerabilities
• Shell execution security analysis

Because every customer’s needs are different, and every application is unique, the actual components chosen during the security audit may vary based on your needs.

The Result

You will receive a comprehensive report clearly defining our findings and giving practical advice for you to follow. The report will both show you what the problems are and – just as importantly – advise you on the measures you can take to resolve them. In this way, you can ensure your application performs optimally. If you wish, we can implement the recommendations for you as well.