RE: Recommendation for a comprehensive security audit

["Ben Ten" <web () ben0xa com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

TrustedSec -- http://www.trustedsec.com

Ben Ten
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)

iQEcBAEBAgAGBQJP/GmtAAoJEDnn01is5CFrVEMH/R8dUYqhYKPxKeTKcz3jACKx
R5XOSwjQZcPox4lvrIHUaWicnaF/SyRkdoNa9IC0Y1GKumYNW0MxqZKkawR2khz5
LHMsAdrqOI/FwMeiXN+BuWQq72T41evlJQNw7cXUI+GUuoJ5/tEEJlbRqVRSCct4
nPdj/hhXHDckK+P8sJNeHoPDmkXQzJTy6W0DDwsGGnkMv/yLBbR+NM9aWDxIbmG+
FCDNKYs3wq0Qz2AFAfML+kOWEJ6+gy57QTI5hsGNy59SBpiPa+8g93wPHnNQ3YdQ
TgQ0Nixcl9Q8bvWKJRJ4sOc+pkvzs8xwpBeYfApIjRP9X51mIruGSsWpBQbXUY0=
=lYlI
-----END PGP SIGNATURE-----

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Security
Sent: Tuesday, July 10, 2012 9:56 AM
To: security-basics () securityfocus com
Subject: Recommendation for a comprehensive security audit

Hello all,

We are an online payments solution provider start-up in the UK and are 
about to roll out our first web application, using fairly standard 
technologies like MySQL, Apache, Java, NodeJS, Flash, Flex and so forth.

What we are looking for is a comprehensive security audit encompassing 
our production as well as development and office environments, not just 
from a technical perspective but also in regards to physical security. 
This also needs to include compliance testing for PCI, FSA and possibly 
others.

Can someone recommend any companies for this, or alternatively a forum 
with reviews of such companies?


Many thanks in advance,

Andre


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------