Security

Security aspect of any software starts before any development begins. We do strict penetration testing and make sure we fix for all the major vulnerabilities found

Security being an integral part of any application, needs to be addressed from the very beginning, even for simplest of application. we believe certain security measures are non-negotiable and has to be part of every application we build. We make sure no unnecessary data is captured, stored and leaked under any circumstances.

Some of the steps we follow are

  1. SSL Certificate pinning.
  2. Check against OWASP rules.
  3. Validate Input data before processing both for type and size.
  4. Do not store any sensitive data.
  5. Do not leak sensitive data as exceptions.
  6. Don’t rely on platform cryptography but use a custom one.
  7. Sensitive configuration data is stored in secured storage e.g. Azure Vault, AWS HSM
  8. Don’t store user credentials in database but use services e.g. auth0 etc to make your data GDPR compliant.
  9. Use encryption both for transit and data at rest for database.
  10. Mitigate DDOS attacks using AWS Shield, Azure DDoS Protection, Firewalls
  11. Using Rate Limiters if needed for APIs to manage availability across customers for a SaaS based product.