You are here : Home » Software Performance Testing » Security Testing » Security code reviews

" Leveraging domain and technology experience to test the application holistically and help client meet its business objectives "

Security code reviews

A Research done by IEEE Security and Privacy shows that 85% of the bugs are introduced at coding stage. While cost of fixing the bug at coding stage is $25, this cost increases significantly the later you find the bug. Finding a bug using Black box testing during field stage is $1,000.

There are two major advantages of source code analysis

    •    If source code analysis is used along with SDLC, it results in enormous cost saving in terms of early
         detection and fixing of problems. It also reduces the business risk significantly as black box techniques
   alone, used towards the end of SDLC cycle, can’t provide 100% security assurance.

    •   Even in case where security testing happens towards end of the SDLC, Source code analysis helps save
   significant time for developers finding the root cause of issues in the code. Moreover, Source analysis in
         conjunction with pen tests provides you the maximum testing coverage.

Figure shown below shows use of Static Source Code Analysis in SDLC

CresTech Security Center, powered by Armorize Technologies, provides Source Code Analysis Service to enable organizations find out security holes directly with-in the code. The result of this service is source code auditing with line level remediation advice. We also provide detailed recommendation for the review and training to the teams, if required, in implementing those recommendations.

Case Studies

Keyword driven Framework using IBM Rational Functional Tester

Automation of an enterprise application using QC, QTP and BPT

White Papers

In this research paper we examine the need for load testing and highlight the shortcomings of open s

Most IT companies use automation testing tools developed by HP (Mercury) and IBM for functional and/

Sub Links

Web Application Penetration Testing Security code reviews Network Security Assesment Industry Certification Consultancy Tool Expertise Methodology