APIs Secure Coding
Focused Training for API developers, DevSecOps, Pentesters, and systems integrators
Read More
-
We are committed
to protect our clients. We are partners.Learn about us -
We can help improving
security and trustworthy.View our services
Char49 offers a wide range of information security services with total confidentiality and reliability.
Our experienced professionals have helped organizations to secure their assets, improving trustworthy
We are specialists in Web Applications security testing (e.g. websites, portals, applications, etc.) but with a well-established and solid partners network we can easily cover any scope. We aim to protect our clients assets, mitigating the impact of compromised systems and information leaking. We partner with our clients, sharing the responsibility to protect their assets.
Training
Web Application Secure Coding
Specialized Training for Front-end and back-end developers, DevSecOps, and Pentesters.
Read More
Research featured on:
Auditing
Independent security auditing is the best way to identify weaknesses. We offer penetration testing services (one-time-only or persistent) with required support to mitigate any security risks.
Consulting
Every organisation needs a strong information security posture. We provide the necessary tools and services in establishing a channel to reduce the risk of data losses.
Training
The human factor is still considered to be the primary risk in security. Our trainings empower organizations with the best information to defend itself against ever-evolving threats.
Clients
Financial Services
Banking, insurance, credit card companies, credit unions, savings, investment companies, brokerage firms, etc.
Healthcare
Biotechnology companies, pharmaceutical companies, clinics, hospitals, healthcare products manufacturers/sellers, etc.
Information Technology
Hardware, software, data centers, platforms, infrastructure, systems integrator, etc.
Media & Telecommunications
Social Media, video games, publishing, telecom equipment, telecom services, wireless communication, etc.
Recent articles
28
May
RootedCON Portugal 2024
The RootedCON computer security conference was established to foster the exchange of knowledge among members of the security community. This year, it was held in Portugal for the first time on May 24 and 25, 2024, featuring our Principal Security Researcher and Co-Leader of the OWASP API Security Pr...
08
Mar
Are you attending OWASP Global AppSec Lisbon next June?
Either way, you may consider joining Paulo Silva, our Principal Security Researcher and Co-Leader at the OWASP API Security Project, on June 26th, for a whole day of hands-on training on API security.
"The Dark Side of APIs - the Attacker's Approach to Protecting Software" is a 1-day hands-on trai...
07
Feb
Guardians of the Gateway: Unveiling API Security Secrets
In today's digital landscape, Application Programming Interfaces (APIs) serve as the connective tissue that enables seamless data and service exchanges between applications and businesses. However, with this great power comes great responsibility, as API security has become a critical concern. To ad...
18
Dec
Subdomain Takeover in a (charmy) Box
This is not the first time we write about subdomain takeover and probably it won’t be the last. Every time we find a subdomain takeover we ask ourselves “How big is this (assets management) problem?”. This time we decided to answer our own question but we got caught in the rabbit hole where we met...