External Penetration Test 2020 Thinkwise Platform

Thinkwise  is creator and owner of the Thinkwise Low Code software platform. To be able to prove to customers that the Thinkwise Low Code platform is secure, Thinkwise has mandated nSEC/Resilience to perform a penetration test on the platform.

For every single area that's been tested, the outcome was:  'good - no vulnerabilities detected'.

The penetration test was performed in the start of 2020. This document describes the scope, approach and outcomes of the penetration test in a condensed form.

The penetration test was augmented with a number of audit activities, in which security controls, secure configuration and secure development were discussed in interview form. The following topics were covered in this audit:

The following topics were covered in this audit:

• 1
  Secure design and architecture (both network and application level)
  
  
  2
  Secure software development (SAST, DAST, threat modeling etc.)
  
  
  3
  IT Security Controls: authorization , authentication, password management
  
  
  4
  IT Security Controls: secure communication and encryption; data protection at rest
  
  
  5
  IT Security Controls: access control / default deny