Biz Serve IT

Biz Serve IT was hired by Gokyo Labs, a data science company, to conduct continuous Vulnerability Assessment and Penetration Testing (VAPT), Threat Modeling, and Static Application Security Testing (SAST) in order to streamline their DevSecOps process. The vendor was chosen based on the cost-benefit value and their comprehensive coverage of DevOpsSec processes. The project involved testing the company's web application and infrastructure for open vulnerabilities and security gaps. Biz Serve IT utilized the OWASP Top 10 testing framework, the STRIDE framework for threat modeling, and Nessus Professional, Burp Suite Professional, and internal scripts for the testing processes. The vendor's team, which consisted of a project manager, two technical leads, and two team members, also helped with code review to discover security vulnerabilities in the company's code base. This engagement is ongoing and conducted on a quarterly basis.