Cyber Security
Dacnis audits and secures web and mobile applications: penetration testing, OWASP Top 10 reviews, secure code review and hardening of cloud access. For network, server and endpoint security we work with our partner IsTech, an IT security company in Sousse, so clients get application and infrastructure security from one team.
Capabilities
What we deliver
Web and mobile penetration testing (black box and grey box)
Secure source code review and static and dynamic analysis
OWASP Top 10 audits with remediation guides
Identity and access management (IAM) design
Web application firewall (WAF) and DDoS protection setup
Compliance readiness (GDPR, ISO 27001, Tunisian INPDP)
Process
Our step-by-step process
Threat modelling
We list your assets and the ways an attacker could reach them.
Penetration testing
Controlled attacks on your APIs, web and mobile apps.
Vulnerability report
Each finding rated by severity (CVSS) with its business impact.
Remediation support
We work with your developers to fix and patch every issue.
Verification audit
A re-test confirms that every fix holds.
FAQ
Common questions
What is the OWASP Top 10?
The OWASP Top 10 is the reference list of the most critical security risks for web applications, such as broken access control, injection and security misconfiguration. Our audits test against it.
How often should a company run a security audit?
We recommend a full penetration test at least once a year and after every major release of your application.
Can you review our code for security during development?
Yes. We add security checks to your Git workflow so vulnerabilities are caught before they reach production.
Other services
Ready to start your Cyber Security project?
Send us a short brief and a technical lead will reply within one business day.
Start a project with us