Also IBM States: Custom Developed Applications Pose Great Risk

IBM published its yearly X-Force report. The study verifies a fact that we often see in our security projects: Security defects in custom applications are not on the radar and represent great risk for companies.

"[...] Again, this figure does not take into account custom developed Web applications that may not have had any vulnerability testing and may never see a public vulnerability disclosure to notify the developer of a Web site about vulnerability issues and potential exploitation."

Virtual Forge recommends reading the entire report.


Of course, we also recommend testing custom developed applications regularly and systematically.