In-Depth Testing
SANS Top 25 & business logic
beyond OWASP Top 10
Zero False-Positives SLA
100% validated findings
money-back guarantee
24/7 Just-in-Time Testing
Once your code is changed, our
experts will promptly test it
First-Class Reports
Zero noise, full exploitation cycle,
threat-aware risk scoring
DevSecOps Native
Unlimited patch validation,
SDLC & CI/CD integration
DevSecOps Native
WAF Integrations
Internal & External Web Apps
Virtual Appliance technology for
internal applications testing
APIs & Web Services
API (REST/SOAP/GraphQL)
security & privacy testing
Cloud Security Testing
Check if attackers can pivot to
other systems in your cloud
Black & White Box
Authenticated (including MFA/SSO)
or Black Box testing
Primary & Secondary Targets
Manual testing for primary targets,
fully automated for secondary
Red Teaming
Breach and attack simulation per
MITRE ATT&CK® Enterprise
- OWASP Web Security Testing Guide (WSTG)
- NIST SP 800-115 Technical Guide to Information Security Testing and Assessment
- PCI DSS Information Supplement: Penetration Testing Guidance
- MITRE ATT&CK® Matrix for Enterprise
- FedRAMP Penetration Test Guidance
- ISACA’s How to Audit GDPR
- OWASP Application Security Verification Standard (ASVS v4.0.2) Mapping
- Common Vulnerabilities and Exposures (CVE) Compatible
- Common Weakness Enumeration (CWE) Compatible
- Common Vulnerability Scoring System (CVSS v3.1)
ImmuniWeb® Continuous Deliverables
ImmuniWeb® Continuous Packages
| ImmuniWeb® Continuous Packages for any need | Corporate Pro | Corporate | Express Pro |
|---|---|---|---|
| Manual Penetration Testing Our security experts conduct advanced security testing of your web application’s business logic, perform chained exploitation of sophisticated vulnerabilities, and run other security and privacy checks that require human intelligence due to high complexity. | Daily | Weekly | Bi-weekly |
| OWASP ASVS Testing Level The higher OWASP ASVS testing level is, the higher number of advanced security tests and checks are performed. | Level 3 | Level 2 | Level 1 |
| Access to Security Analysts Our security experts are at your service for any questions about remediation, exploitation or analysis of the detected vulnerabilities. | 24/7 | 24/7 | 24/7 |
| AI-Enabled Vulnerability Scanning Our award-winning Deep Learning AI technology accelerates and intelligently automates over 10,000 checks of your web application security, which usually require human labor and cannot be performed by traditional vulnerability scanners due to complexity. | 24/7 | 24/7 | 24/7 |
| Continuous Automated Red Teaming Our AI-enabled technology automatically detects and prioritizes testing of your web infrastructure against the most recent hacking techniques and real-life payloads. | 24/7 | 24/7 | |
| Continuous Breach & Attack Simulation Our security experts will carefully exploit detected vulnerabilities trying to bypass security controls, avoid detection mechanisms and exfiltrate data simulating a real attack. | 24/7 | ||
| Penetration Test Certificate Once the detected vulnerabilities are fixed, you receive a penetration test certificate. |  | |
