is performed by certified Deda Cloud specialists with deep expertise in the dynamics of a cyber attack, both from a technical and human perspective.
The analysis consists of the following steps:

• detection and collection of information
• Identification and classification of vulnerabilities detectedthrough CVSS v3 (Common Vulnerability Scoring System).
• definition the possible mitigation strategies

The Testing methodology adopted by Deda Cloud is based on structured review processes, with strong reference to “Best-in-Class” frameworks and practices.
These include:

• Open-Source Security Testing Methodology Manual (OSSTMM);
• The Open Web Application Security Project (OWASP Testing Guide);
• NIST 800-115;
• MITRE ATT&CK framework;
• PTES (Penetration Test Execution Standard).