The mPROLIB mobile application has passed the OWASP ASVS level 2 security audit

Our mPROLIB mobile application was subjected to a comprehensive security audit conducted by an independent company, TestArmy Group S.A. The purpose of the audit was to verify the security level of the application in accordance with the international OWASP ASVS (Application Security Verification Standard) – one of the most widely recognised cyber security benchmarks.

The audit included both manual and automated tests, conducted using black-box and gray-box methods. Experts analysed all functionalities of the application, assessing them for resistance to a range of contemporary threats, including vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), errors in authentication, session management or unauthorised access to data.

The methodology used – OWASP ASVS version 4.0.3 – provides for three levels of verification, with level 2 dedicated to systems that process sensitive data and perform important business functions. After conducting all the required tests, our application met the level 2 criteria, meaning that it was deemed secure and resistant to most advanced attack techniques.

This positive confirmation is no accident – it is the result of our consistent approach to software design and development. For us, application security starts at the planning stage. We design every solution to eliminate potential threats even before they arise. During implementation, we revisit assumptions to ensure they are in line with good practice, and at the testing stage, we verify the effectiveness of security in practice. This three-step approach allows us to create software that truly protects user data.