Mobile App Pen-Test

Company Name

Company Website

Name

Email Address

Mobile Application name

Mobile operating system (Android, iOS)

Does the application have SSL pinning implemented?

If the application has SSL pinning implemented, is there a possibility to remove it?

Which penetration testing method would you like to be performed

White Box Black Box Grey Box

(Black Box, White Box or Grey Box)

Has there already been done any type of security check of the web application

(penetration testing, vulnerability assessment, security code review)

What is the purpose of the mobile application, who is it intended for, and who uses it?

Does the application have a test environment or is pen-testing to be done on production?

Has the mobile application already been data pre-filled or is it empty (data must be entered manually)?

Has the development of the web application been completed or is it in the development process?

What technology is used (programming language, framework, database)?

Authentication method, how does the user log into the application?

Does the server have any type of protection such as WAF (Web Application Firewall)? Is there a possibility to add our IP addresses to the whitelist?

(Username and password, MFA, certificates, tokens)

Do you have an application manual, architecture diagram, or API documentation? Can you provide it to us?

How many roles does the application have, and do all roles need to be tested? If possible, provide us with a brief description of them.

Other

Cybersecurity Services