Enterprise Client Community

Hi,

as we're using our application in a critical environment we have a high interest of building a secure application.

Has the RISC client ever be evaluated in terms of vulnerabilities? Like XSS, CSRF attacks or what else is out there in this evil internet?

Our customers are going to do penetration tests and we'd like to ensure they don't find anything

Best regards,
Manuel

Hi,

please check the "Developers Guide" chapter "Security issues"...

Regards, Björn

Hi,

As part of a major Swiss Insurance Company, we have to comply with strong security.

Very recently, the recognized IT-Security company we trust for years has exhaustively checked one of our CaptainCasa applications ported to RISC. The results are very satisfactory, attesting that the RISC framework is adequately used and resistant to common web attacks. Only minor weak points have been reported. We are now allowed to make the application available on the extranet.

We hope this information helps and accords with other experiences on this matter.

Kind regards, Daniel

Hi Daniel,
thanks for sharing this...!
Regards, Björn