Secure Development Policy (SDLC)

Objective
Ensure that applications are developed following appropriate security practices.

guidelines

• Validation and sanitization of inputs in forms
• Data escape on outputs to prevent XSS
• Using secure features of the framework (WordPress)
• Constant updates of dependencies, plugins, and libraries
• Separation of environments: development, testing, and production
• Functional and technical review prior to deployments

Testing

Manual testing in a staging environment
Behavior validation prior to production

Our Approach
OWASP Top 10 principles are applied operationally.