Skip to content
Performing Code Reviews to PCI Requirements
Summary
We were asked by a customer about performing code review based on the PCI requirements.
- Published
- Collected
Related coverage
blog ·
netspi.com
Industry Leaders Weigh in on the 2023 OWASP API Security Top 10
The 2023 OWASP API Security Top 10 keeps BOLA and Broken Authentication on top while adding SSRF, unrestricted resource consumption, and unsafe API consumption; industry pros react.
blog ·
netspi.com
Getting Started with API Security Best Practices
API security remains underprioritized as usage surges; the 2023 OWASP API Security Top 10 still leads with BOLA and broken authentication, and manual testing is needed where scanners fall short.
blog ·
netspi.com
Application Self Protection – A New Addition to the OWASP Top 10
Breaks down OWASP Top 10 2017 candidate A7, Insufficient Attack Protection, urging apps to detect, block, log, and respond to automated attacks rather than only validating input.
blog ·
netspi.com
An Introduction to the Open Software Assurance Maturity Model (OpenSAMM)
OpenSAMM, OWASP's free maturity framework, splits app security into four business functions—Governance, Construction, Verification, Deployment—letting organizations score each app in under an hour.
blog ·
netspi.com
The Way Back Machine – Microsoft Word for Windows 1.1a
After Microsoft open-sourced Word for Windows 1.1a, a CheckMarx scan of the 1980s C++ codebase surfaced strcpy-style unsafe functions and 123 gotos—showing how far secure coding has come.
blog ·
netspi.com
Are You Testing Your Web Application for Vulnerabilities?
As an organization that performs a large volume of code reviews and penetration tests, NetSPI is frequently asked which type of application assessment is the best option.