Harden: close the gaps
Work that helps make an application safe to put in front of customers: its code, its configuration and its deployment and, where it takes payments, the payment integration and compliance.
What is included
- Security fixesThe weaknesses in the code and its dependencies, fixed.
- Hardening configurationFramework, server and application settings tightened so the app exposes less.
- Securing the deploymentThe way the app is deployed and hosted, made safer.
- Payment integrationWhere the app takes payments, the payment provider integrated the way it should be.
- PCI and other complianceWhere the app takes payments, the work toward PCI and the other compliance rules that apply to you.
How it works
- A first conversationA 30-minute conversation about the app, how it is deployed and whether it takes payments.
- Scope and quoteWe agree in writing what is in scope, and you get a fixed quote for it.
- HardenWe do the work and walk you through what changed.
Good to know
What we need to know. The scope of Harden depends on a few things we ask about first:
- Your stack: the CakePHP and PHP versions, the hosting and the services the app depends on
- Your payment provider, if the app takes payments
- The level of PCI or other compliance you need to meet
Harden can also include pluginizing the app into reusable plugins and integrating existing third-party APIs. Those are scoped together with the package.
Questions
Do we need Assess first?
No. If you already know what needs fixing, you can start with Harden. Assess helps when you are not sure.
Our app takes payments. Is PCI part of Harden?
Harden includes payment integration and the work toward PCI or other compliance rules that apply to you. We ask which level you need at the first conversation.
Is the price fixed?
Yes, per scoped project, quoted in writing after we talk through the work.
Do you need access to our production system?
No. We review the code and the configuration of your production system. Depending on your project, we will ask for your production configuration files and check that the other parts of your stack are in place.
Tell us about your app
Tell us what you have. We reply within one business day.
