Security Operations

An assessment is, by definition, a point in time activity. However, neither the application itself, nor the environment it lives in is static. System administrators make network and operating systems changes, security researchers identify new vulnerabilities in application components, automatic updates change the system in subtle ways. Add to this the potential for persistent attacks against the application going unnoticed and the likelihood of application compromise increases over time.

Feature	Application Security Monitoring	Application Security as a Service
Initial vulnerability scan
Yearly application penetration test
Findings discussion with client
Remediation discussions with vendor
Re-test of resultant patch
Security monitoring configuration
Identification of in-scope systems
Monitoring appliance
Full OWASP Top 10 Analysis
Appliance configuration and on-boarding
Customer security portal configuration
Data categorization
Data parsing
Data normalization
Dashboard configuration
Data forwarding (upon request)
Alert forwarding (to customer security team)
24x7 incident validation
Log and SIEM management
Maintenance of data collection systems
Recommendations for patching and security updates
Monthly reporting
24x7 Monitoring
Custom security use-case configuration
Proactive log analysis
Quarterly review by a Senior Cybersecurity Engineer
Named cybersecurity team
End-to-end responsibility for application security monitoring
Monthly reporting with optional engineer calls