- Home
- Companies
- Withings Health Solutions
- Services
- Secured Development Services
Secured Development Services
Training on secured code; At least once a year, developers participate in secure code training covering the top 10 OWASP or equivalent security risks, common attack vectors, and Withings security controls.
Framework security controls
Withings relies on modern techniques with security controls to limit exposure to the top 10 OWASP security risks. These inherent controls reduce our exposure to SQL Injection (SQLi), Cross Site Scripting (XSS), and Cross Site Request Forgery (CSRF), among others.
Agile organization, code review and testing
All development activities are organized in AGILE method with the establishment of sprints and prioritization of tasks with the Product Manager team. All sprints are historized. Developers must perform unit tests, functional integration tests, and security tests. Code and tests are reviewed and evaluated through peer reviews before deployment.
Software Quality Assurance
The Software Quality Assurance department tests the services and applications before going into production (manual or automatic tests).
Environments separations and test data
The development and test environments are logically separated from the production environment. No personal production data is used in our development or test environments.