For business For individuals For public sector For partners
Request an engineer Help
Payment by invoice Card payment Check a payment Closing documents
Русский English 中文
Sign in
Services
Solutions
Service plans
Case studies
Training
About us
Contacts
Sign in
All services
Basic Up to 15 workstations, business-hours support Standard Up to 50 workstations, 24/7 support, servers and network Premium Dedicated team, 15-minute response Project-based One-off work at a fixed quote Free IT audit Infrastructure assessment in 5 days
IT outsourcing and technical support Requests, on-site engineers, 24/7 Service Desk Support levels and SLA Response time fixed in the contract System administration Windows and Linux servers, AD, virtualisation IT infrastructure Core environment, assessment, VDI Networks and telecom Structured cabling, design, audit and monitoring Low-voltage systems Video surveillance and access control Cloud services and hostingNew VPS/VDS, servers for 1C and Bitrix, S3 Backup Backups, cloud storage, recovery plan
Regulatory requirements 152-FZ, personal data, documentation Protection of systems and data Infrastructure, applications, databases, WAF Monitoring and control SOC, vulnerability scanners, antivirus protection Security tools Supply and deployment of security tools, VPN and cryptography
Websites and web development From a business card site to a B2B platform on 1C-Bitrix E-commerce and integrations 1C exchange, payments, delivery, marketplaces Bitrix24 and portals Portal and CRM implementation, licences Custom development Purpose-built services, mobile applications Testing and QA Functional, load and automated testing
Artificial intelligenceNew AI implementation, strategy, staff training Data and analytics Data quality, warehouses, document processing Consulting and audit Digital strategy, systems and architecture audit Marketing Audit, sales funnel, consulting
Workstations Desktops, laptops, peripherals, consumables Servers and networks Servers and storage, network hardware, UPS Retail equipment Online POS, product labelling, scanners Software Antivirus, development and admin software Training Corporate, group and individual
Not sure what to choose? We will run a free infrastructure assessment in 5 days Request an audit
All solutions
Import substitution Migration to Russian software and hardware 152-FZ compliance Documents and safeguards ready for an inspection Office relocation Network, servers and workstations at the new site Opening a branch Standard setup and a link to head office Remote work VDI, 1C access, secure channels Downtime protection Backups, monitoring, recovery plan
Retail and e-commerce POS, product labelling, online store, 1C exchange Manufacturing Shop-floor networks, servers, accounting systems Healthcare Personal data protection, fault tolerance Construction Site-to-site connectivity, workstations, CAD Logistics Warehouse, data terminals, integrations and monitoring Public sector Import substitution, portals, FSTEC requirements
Small business Up to 15 workstations, basic support Mid-sized business Servers, network and 24/7 support Large business Dedicated team, SLA, reporting Branch network One IT standard across every location
No suitable scenario? Describe your task and we will propose a solution that fits your terms Submit a request
About us What we do and how we work Special offers Current promotions and terms Contacts Phone, email and office address

What is included

We check what is exploited most often: authentication, permissions, input handling and dependencies.

Discuss the scope

Authentication checks

Bypassing login, weak passwords, flawed password recovery and session lifetimes.

Access rights

Whether a user can obtain someone else data by substituting another identifier. The most common finding.

Input handling

Injection into database queries, cross-site scripting and file uploads.

Dependencies

Libraries with known vulnerabilities. Modern projects have dozens.

Configuration

Exposed admin sections, debug modes, unnecessary headers and accessible backups.

Report

Findings with a severity rating, reproduction steps and remediation advice.

How the work runs

Testing a typical web application takes one to two weeks including the report.

01

Agreement

Written permission, the scope of the test, the time window and contacts.

02

Reconnaissance

Gathering information about the application: entry points, technologies and available interfaces.

03

Testing

Manual and automated, in a gentle mode with no destructive actions.

04

Report and retest

Prioritised findings and, once fixed, a repeat check.

The most common finding is access to someone else data through a direct link. A user changes the order number in the address and sees a stranger order. Automated scanners rarely catch this because formally there is no error: the server honestly returns what was requested. Only manual testing finds it.

Frequently asked questions

Yes, with the written permission of the system owner. We work strictly under a contract with defined scope and timing. Testing someone else systems without permission is illegal and we do not do it.

We work in a gentle mode with no destructive checks. Even so, any security testing carries risk, so it is preferable on a copy, and on a live system only in an agreed window with a fresh backup ready.

A scanner checks against a database of known signatures and is good at finding outdated components. Logic flaws, such as access to other people data, bypassing business rules and incorrect permissions, are visible only to a human. A proper assessment combines both.

Other services in this area

The whole area
Service Functional testing Checking usage scenarios before release Service Load testing How the system behaves under peak traffic Service Test automation Automated tests for regular checks Service UI/UX testing Checking interface usability with real people

We will test your application for vulnerabilities

Tell us what the application is and whether there is a test environment. We will agree the scope and run the assessment.