OFFICIAL REFERENCE
NIST SP 800-115: security testing and assessment
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
RESOURCES & REFERENCES
Prepare with the
right information.
Practical material for security leaders, engineering teams and procurement owners.
Start with primary sources.
OFFICIAL REFERENCE
OWASP API Security Top 10
Use the official publication and confirm applicability to your entity, jurisdiction and agreed testing objective.
Practical sector guides
Requirements5 min read
Penetration testing or DORA TLPT: which engagement do you need?
Separate a defined technical test from advanced testing obligations that apply to designated financial entities.
Read the perspective
Delivery5 min read
Business logic testing: prove the approval boundary
Test actor, object and workflow state together, with synthetic orders and independent read-back.
Read the perspectiveDelivery5 min read
Cloud and CI secrets: from exposure to demonstrated authority
Trace an exposed build credential through its identity, audience and permitted operations.
Read the perspective