Overview
What cybersecurity services does Ants Creation provide?
Ants Creation (Pvt) Ltd’s own security team finds the weaknesses an attacker could use in your web applications, APIs, Android apps, networks, servers and cloud accounts, and shows you how to fix them. Every test starts with a written authorisation you sign and an NDA, and one re-test of the fixed issues is included.
Testing shows what is exposed today. Reviews of firewalls, servers, network architecture and cloud settings show where the setup itself creates risk. DevSecOps builds security checks into how your software is built and released.
Because Ants Creation also builds websites, software and Android apps, our developers can fix what we find, if you want them to.
What is included
Which security services do we provide?
How it works
How does a security engagement work?
01
Scope and authorise
The systems in scope and the testing window are set out in a written authorisation you sign, alongside an NDA.
02
Map
We map the target and how it is used, so testing covers what matters.
03
Test
We look for weaknesses and confirm, safely, which ones are real.
04
Report
Each finding is rated by severity, with the evidence and the steps to fix it.
05
Re-test
After you fix the issues, one re-test of the fixed issues is included.
Why Ants Creation
Why choose Ants Creation’s security team?
Since 2011, Ants Creation has completed 700+ projects for 400+ clients in Sri Lanka and abroad.
VAPT explained
What is VAPT?
VAPT stands for vulnerability assessment and penetration testing: two security tests used together. The vulnerability assessment finds and rates known weaknesses across a system; the penetration test then safely tries to exploit them, to show what an attacker could actually reach.
| Vulnerability assessment | Penetration test | |
|---|---|---|
| What it does | Finds, checks and rates known weaknesses across the system | Safely tries to exploit weaknesses, to show what an attacker could reach |
| How | Automated scanning, with every finding checked by our security team | Hands-on testing by our security team, within the scope and window you authorise |
| Suits | A regular check-up, or a first step before a penetration test | Showing what can actually be exploited, and how far an attacker could get |
Ants Creation’s own security team carries out vulnerability assessments and penetration tests of web applications, APIs, Android apps and networks. Every engagement starts with a signed authorisation and an NDA, and one re-test of the fixed issues is included.
Common questions
Cybersecurity services: frequently asked questions
What is the difference between a vulnerability assessment and a penetration test?
A vulnerability assessment finds and rates known weaknesses across a system, combining automated scanning with a person’s review of each finding. A penetration test goes further: it safely tries to exploit the weaknesses, to show what an attacker could actually reach. Used together, they are often called VAPT. See Ants Creation’s vulnerability assessment and penetration testing services.
Will testing disrupt our systems?
Testing follows the systems in scope and the testing window set out in the written authorisation you sign before anything is tested, so you decide what is tested and when. Riskier checks can run outside business hours or against a staging copy of the system. Ants Creation’s own security team carries out the work, and an NDA protects your information.
What do we receive?
A written report with a summary for management and, for each finding, its severity, the evidence and the steps to fix it, so developers know what to change and managers know what to fix first. After you fix the issues, Ants Creation’s security team re-tests them once, included in the engagement, to confirm the fixes closed each issue.
Do you test mobile apps?
Yes, Android apps. Ants Creation’s security team checks how an Android app stores data on the phone, talks to its servers and protects accounts, and what someone could learn by unpacking it. See mobile application security assessment. We do not test iOS apps. Each assessment is covered by a signed authorisation and an NDA, with one re-test included.
Can you fix what you find?
Yes. Because Ants Creation also builds websites, software and Android apps, our developers can implement the fixes if you want them to, or your own team can, using the evidence and the steps in the report. Either way, one re-test of the fixed issues is included, so you can confirm each issue is closed.
How often should we test?
Many organisations test at least once a year, and after major changes such as a new application, a large release or a move to the cloud. Between full tests, a vulnerability assessment can check for newly known weaknesses, and DevSecOps can run security checks automatically each time the code changes. Ants Creation can recommend a schedule based on your systems and how often they change.
Is penetration testing the same as VAPT?
Not quite. VAPT stands for vulnerability assessment and penetration testing, the two used together: the assessment finds and rates known weaknesses across a system, and the penetration test safely tries to exploit them to show what an attacker could reach. Ants Creation’s own security team offers both, for web applications, APIs, Android apps and networks, with one re-test of fixed issues included.
Our Cybersecurity services
Tell us what you need.
Tell us what you need, and we will recommend the right next step. No obligation, no sales script.