Website security audit

Question

XSS

Greetings

Who can recommend an organization for a full website security audit? We also need the maximum possible checklist of verification, like this

Thank you

Answer 1

Positive technologies, no? www.ptsecurity.ru/

Answer 2

You can contact them . We used them not too long ago and were very satisfied. Their checklist is even wider, they even tried social engineering.

Answer 3

It is possible here www.antihacking.ru
For the price/quality an ideal variant.

Answer 4

Depends on how much your site brings in. And how much you can lose when it is hacked / idle.
If you are ready to invest 700,000 - 3,000,000 rubles in an audit, then you can turn to companies from the "major league"
Positive Technologies , Group IB , Digital Security
. If 300,000 - 500,000 rubles, then you can look towards small companies. Such as
Deteact , ONsec , INCsecurity , Metascan
If the budget is less than 100,000 rubles, then you can turn to Qualys automated vulnerability search systems
, again Metascan , Acunetix , Detectifyand give your admin their report.
In order to figure out what vulnerabilities are and how to find them, you should start with the guide from OWASP: https://www.owasp.org/images/9/96/OWASP_Top_10-201...
This is the main one on the Internet collection of knowledge on attacks\protection of web applications.