In the world of digital financial solutions, application security is a fundamental requirement. Our clients and partners, including financial institutions, rightly expect security to be a key consideration throughout the development and operation of the systems they rely on.
At FX Software, we approach application security not as a one-time task, but as an ongoing responsibility. Our goal is to identify potential vulnerabilities and security risks as early as possible and address them before they can cause problems.
To support this objective, we regularly assess our applications using different security testing methods. Each method approaches security from a different perspective, helping us build a more comprehensive understanding of potential risks.
01. Static Code Analysis – Security Starts with the Source Code
One important aspect of application security is the regular examination of source code.
Static Application Security Testing (SAST) allows us to analyze an application's source code without executing it. This approach helps identify potential security vulnerabilities, coding weaknesses, and risky implementation patterns that could lead to security issues.
One of the key advantages of static code analysis is that potential problems can be identified during the development process. This creates opportunities to address security concerns at an early stage, before an application is deployed to a production environment.
02. Penetration Testing–Style Assessments – Thinking Like an Attacker
While static code analysis focuses on the source code, penetration testing–style assessments examine the behaviour of a running application.
These assessments approach the application from the perspective of a potential attacker, exploring possible weaknesses and observing how the system responds to security-relevant scenarios.
Such testing can help uncover issues that may not be apparent through source code analysis alone.
Although these two approaches use different techniques, they share the same objective: identifying potential security risks before they become serious problems.
03. Expert Supervision – Supported by Certified Expertise
Application security activities at FX Software are professionally supervised by László Komjáti, Product Development Lead, whose responsibilities include the professional coordination and oversight of application security assessments.
In 2023, László successfully passed the EC-Council Certified Ethical Hacker (CEH) examination and holds a valid certification.
The CEH certification focuses on ethical hacking methodologies, attack techniques, and the identification of security vulnerabilities. This expertise supports an approach to application security that considers not only the developer's perspective but also the methods and techniques that potential attackers might use.
Security Requires Continuous Attention
Technology continues to evolve, and new security threats emerge alongside it. No application can responsibly be described as completely free from all possible security risks.
This is why, at FX Software, we believe security assessments should not be isolated events. Instead, they should form part of a regular, structured, and conscious approach to application security.
We believe that more secure applications are built through prevention, regular assessments, and appropriate professional supervision.
If you have any questions about the security of our applications or the assessment methods we use, please feel free to contact us.
