Entersoft Security

Application security testing with human review and developer fixes

Concentrating on the security of applications, Entersoft Security offers a cybersecurity service that mixes automated scanning with expert review. It describes its approach as one that combines automated scanning with the judgement of expert analysts, and it says it feeds findings into the tools developers already use so that problems can be fixed quickly. The company presents application security as a continuing process rather than a single exercise, and it offers services that cover testing, review, remediation and advice.

Testing web, mobile and API applications

The core service is security testing of web applications, mobile applications and application programming interfaces. Assessments are carried out by specialists, and the company says every finding it reports is validated and comes with a proof of concept and a statement of its impact, so that a client knows which problems are real and how serious each one is. It also reports a set of negative checks run against each application, which it presents as part of its evidence.

Code review and remediation help

Manual code review is offered for source code that needs close checking beyond automated tools. Remediation help goes further: the company provides bug-fixing assistance with sample code and suggestions for pull requests, so the developer receives a route to the fix as well as the report of the problem. The firm says its findings are delivered in a form that developers can act on directly.

Threat intelligence and anti-phishing

Other services address threats more widely. The company offers threat intelligence and anti-phishing work, along with hackfests, which the company lists as organized security testing events. These services sit alongside the application testing rather than replacing it.

Advisory, DevSecOps and compliance

For organizations that want guidance rather than testing alone, the company offers cybersecurity advice, help building security into development operations, and management of compliance. Its material names CERT-In, ISO 27001, GDPR and CREST as standards it works to, and it measures application security maturity with a scoring product called the Application Security Quotient.

Clients and case studies

The company describes several clients whose needs shaped its work. A logistics company that sold to a government in Asia needed every security gap found and fixed within a week. An Australian fintech needed its security raised to the standard a bank required, and a listed media company wanted help improving the maturity of more than three hundred applications. The firm also says it helped an Indian lending company meet central bank guidelines for cybersecurity and achieve ISO 27001. The business links its service with Azure DevOps, GitHub, Jira and ServiceNow.