Mitiget helps you start and scale your security program, integrate with your SDLC and coach your developers on fixing security vulnerabilities.

Finding vulnerabilities in your code is the first step in creating a secure application. The second is remediation, which requires knowledge, experience, and specialized developers. What happens if you get stuck and don’t know the right way to remediate? Mitiget provides you with access to Application Security specialists, all former developers who have been in your shoes and have experience in developing applications and working through challenging remediations. With multiple ways to leverage these experts, our team is ready to make your remediations as fast and pain-free as possible.

Mitiget application security specialists work with you to remediate flaws and vulnerabilities faster. Through one-on-one coaching sessions, you’ll prioritize remediation so you can focus on the most important issues first. Thanks to this coaching, your development team will learn how to write more secure code faster in the future and how to remediate more difficult flaws when they arise. With our optional Accelerated Scheduling, you’ll get rapid and regular access to our specialists. You can arrange for one or more time slots per week for guaranteed time with a specialist. In addition, you can choose the option of next-day scheduling for guaranteed sessions within 24 hours.

Database Security Assessment

Database security is a specialist topic that overlaps with computer security, information security and risk management. The database security assessment we provide is about checking various information security controls aimed to protect your database against compromises of their confidentiality, integrity and availability. The set of our tests checks various types or categories of controls, such as technical, procedural and physical. We will analyze your database (such as: MS SQL, Oracle, MySQL, etc.) and check its configuration, security features, access rights, system and object privileges and many more.

Our security specialists will simulate attacks onto your database and check its security features from a number of perspectives, which include:

• Attacks from internal users (authenticated and un-authenticated access);
• Security of the data within the database (e.g. encryption/hashing techniques used for storing sensitive data);
• Database hardening and security;
• Protecting sensitive data from privileged users (e.g. DBA);
• Defense in depth mechanisms.

Application Security Design Review and Threat Modeling

1. Enumerate and document a system’s security design/architecture through interviews of development/ engineering team personnel, documentation review, and limited source code analysis (if available)
2. Perform threat modeling to overlay the design with assets, interfaces, threats, attack vectors, and controls. Document potential vulnerabilities and prioritize by risk.
3. Identify gaps relative to recognized secure design patterns (including authentication, authorization, and security event logging & response)
4. Enumerate conflicts between business requirements and security considerations so informed trade-offs are made.
5. Recommend solutions for addressing security weaknesses & vulnerabilities.
6. Enhance and inform other security activities like penetration testing and code review.
7. Adaptable to systems/applications undergoing design, prior to implementation, or in production.