Our Company will assign one or more consultants with relevant programming experience to each engagement. Each security consultant has a great deal of experience with application security. It is necessary to have a thorough understanding of the intended application. The lead security consultant will spend time with an appropriate developer to understand the software before beginning the actual source code review testing process. This will entail a group discussion on relevant topics such as design, documentation, and so on.

It is critical to achieving both breadth and depth of coverage unless Our Company has a specific focus. A hybrid approach combining dynamic tooling and manual review is used to accomplish this. Furthermore, having concurrent access to a running version of the target system while conducting the code review can maximize context and verify findings in real-time.