A web application penetration test aims to identify security vulnerabilities resulting from insecure development practices in the design, coding and publishing of internal or external web application Web app penetration tests test will generally include: 1-Testing user authentication to verify that accounts cannot compromise data; 2-Assessing the web applications for flaws and vulnerabilities ( OWASP Top 10 ) 3-Confirming the secure configuration of web browsers and identifying features that can cause vulnerabilities 4-Safeguarding web server security and database server security. The vulnerabilities are presented in a format that allows an organization to assess their relative business risk and the cost of remediation. These can then be resolved in line with the application owner’s budget and risk appetite, inducing a proportionate response to cyber risks

• ي