​SALTT Tech delivers industry-leading technical testing and assurance services with our all-on-shore local team of CREST certified penetration testers. Protect your digital assets from a cyber breach by testing them with SALTT Tech. Our technical assurance service goes beyond basic vulnerability scanning and looks deeply into the application programming logic to identify exploitable attack paths that an adversary can leverage against your digital assets.

​

What makes SALTT Tech technical assurance unique:

• All-on-shore team of CREST certified penetration testers

• Our team are all software developers at heart – we possess exceptionally deep application programming experience, so we understand what we are testing

• We go beyond simple vulnerability scanning or even basic OWASP (Open Web Application Security Project) testing and deep into application logic.

 

Confidentially deploy digital services to your customers, knowing they have been tested by SALTT Tech using up-to-the-minute TTPs (Tools, Techniques and Procedures).

SALTT Tech’s range of technical testing and assurance services delivers penetration testing for the following digital services:

 

Web Application Penetration Testing

Verify the security status of your online services before a malicious threat actor compromises them. Our developer-first approach takes a programming-centric view of application penetration testing – not an infrastructure view. We investigate exploitable attack paths in the application logic, not just a vulnerability scan.

 

API Penetration Testing

APIs facilitate service-to-service communications between organisations and applications, which has become an integral part of our digital society. Recent developments have seen an API explosion with significant API sprawl across the enterprise. If left unmanaged and untested can lead to catastrophic data exfiltration attacks and customer information exposures. Managing API security is rapidly becoming a mainstay of capability for cybersecurity teams.

 

External Vulnerability & Attack Surface Assessment

The first phase of the vast majority of attacks involves an external reconnaissance by the threat actor of your internet-facing services. Threat actors will perform external reconnaissance of your environment by looking for exploitable vulnerabilities and mapping out your digital assets to determine an attack surface. This reconnaissance phase enables the adversary to confidentially identify an initial entry point in your organisation. Stay ahead of the adversary with a SALTT Tech external vulnerability & attack surface assessment. Available as both an ongoing managed service as well as a one-time assessment, this capability delivers a comprehensive, adversary based view of your external facing assets and the risks they represent.