Transfer Online Technology Development


Information Security

TOLTD's Information Security Services and Application Testing


As more organizations leverage the Internet for business and commercial transactions, attackers are focusing on applications to penetrate corporate security controls. Historically, developers have focused on functionality over security, which has presented an entirely new venue for attackers to launch exploits and compromise systems and information.

Transfer Online Technology Development, LLC. is a premier provider of industry-leading Application Security Services. We provide security consulting and assessment services for web-based and other applications including penetration testing, source code review, database analysis, and secure application development training.

These services provide assurance that applications are securely designed, deployed, and defended against costly compromise. Transfer Online Technology Development, LLC. Application Services enable clients to protect revenue and reputation and avoid repudiation risks by providing security at the foundation of the Enterprise: the application code.

Transfer Online Technology Development, LLC. Security provides the leading edge in application assessment methodologies, application design and defense techniques, and vulnerability research, including:

Secure Application Design

  • N-tier application security architecture consulting
  • Network and application security control consulting
  • Web services security consulting
  • Development process consulting to securely enable business applications
  • Compliance designs for Visa CISP, Mastercard SDP, GLBA, SOX, HIPAA

Secure Application Defense

  • Application native security control implementation
  • Application firewall and IDS implementation
  • Network security control implementation appropriate for applications
  • Incident Response handling and Digital Forensics on application compromises

Application Security Analysis

  • Web Application Assessments
  • Source Code and Binary Analysis
  • Application Threat-Modeling and Architectural Analysis
  • Web Services and ActiveX Analysis
  • Database Security Analysis (MSSQL, and MySQL)
  • Compliance assessments for Visa CISP, Mastercard SDP, GLBA, SOX, HIPAA

Some organizations believe applications have security built in or are "good to go" out of the box. This is not usually the case. In fact, it is rarely true. Our security consulting services help put the security back into your applications:

  • We do not rely solely on tools and scanners for application assessments scanning because of their relative immaturity. All our testing beyond basic URL scanning is performed manually by experienced security professionals.
  • We perform comprehensive threat analysis to identify key assets needing protection and defines security threats to those assets.
  • We will provide you with a detailed report on security vulnerabilities along with architectural and operational weaknesses identified based on our proprietary checklist that goes beyond requirements identified in the OWASP standard or checklist. Our findings report also provides detailed explanations of countermeasures necessary to secure applications, data assets, and resources, and outlines policy recommendations to ensure long-term compliance with industry best practices.

View our portfolio »