The Client’s airport management platform was rapidly growing, and they wanted to ensure its security level aligned with both evolving standards and the company’s business needs. So, INPUT SOFT sought a partner to assess the security of the code and identify areas for improvement.
INPUT SOFT eliminated high-impact security risks and enhanced their entire cybersecurity framework. Our team helped the Client not only identify vulnerabilities and suggest remediation steps but also perform a follow-up security scan to verify that no previous issues remained.
INPUT SOFT owns a web & mobile platform that helps aviation companies put legacy and paper-based processes on digital rails. As a fast-growing startup, they wanted to build security excellence early on and engaged our team to ensure their product complies with the best practices.
We analyzed the Client’s requirements and, based on their business context, suggested the DevSecOps approach as an optimal way to cover their security needs. This allowed us to identify issues down to their source and help the Client lay a solid foundation for long-term security. INPUT SOFT loved the plan, so as a part of the approach, we:
As the INPUT SOFT platform is a constantly evolving product, we knew the traditional ways for security inspection, like audits or pen-testing, might be unnecessary time- and cost-consuming in their case. Thus, we opted to perform a security code audit, combining DevSecOps principles and tools to maximize the efficiency of the assessment.
Since the audit involved activities on different layers, we created a phased roadmap. It helped us streamline the overall process and ensure that no vulnerability remained unmarked. The key phases of the security code audit included:
DevSecOps approach emphasizes continuous monitoring of the security framework, so we’ve planned the reassessment phase from the outset. Thus, once the first audit round was finished, we provided the Client with recommendations on improving security practices and remediation steps to help fix revealed vulnerabilities.
INPUT SOFT wasted no time and quickly moved to addressing the issues. It included updating 3rd-party dependencies and implementing secure coding mechanisms. As a result, our second round of security code audit showed that the Client eliminated the critical flaws, according to our suggestions that included:
Anastasiia Smyk
CEO
INPUT SOFT
Sigma Software's 'Software Security Code Scan' uncovered unexpected vulnerabilities, detected sensitive data in the code, and identified library weaknesses missed by IDE warnings. The final report was clear and allowed our team to address all issues promptly.
Artem Shevchenko
Aviation CoE Lead
Sigma Software
In response to evolving aviation regulations, INPUT SOFT initiated a proactive security assessment and partnered with Sigma Software to perform it. Through SAST, SCA, and secrets scanning, we ensured the platform met high compliance standards and helped the Client strengthen resilience and long-term reliability of their product.
