OWASP Top Ten

AppvanceIQ performs vulnerability testing according to the OWASP Top Ten. For more information see OWASP Top Ten.

"The OWASP Top Ten is a standard awareness document for developers and web application security. It represents a broad consensus about the most critical security risks to web applications." - The OWASP Foundation

Using OWASP Top Ten results

Treat the OWASP Top Ten as a risk-awareness taxonomy for organizing findings, not as a substitute for application-specific threat modeling. Run scans only within written scope, preserve the affected request and response evidence, and have the application owner validate severity and remediation.