Nested Knowledge will undergo penetration testing of its web application on an annual basis. An external security firm will test the web application to identify vulnerabilities. During the testing period, no software releases will be pushed, except releases with important bug fixes. Any vulnerabilities detected will be remediated promptly by the Nested Knoweledge development team.

Each penetration test will follow the steps:

1. Reconnaissance: gathering information before an attack
2. Enumeration: finding attack vectores
3. Exploitation: verifying security weakness
4. Documentation: Recording results

Return to Policies