Secure SDLC Control Assessment
Assessment of build, review, and release controls that keep insecure changes out of production fintech apps.
From HK$30,000 · 2–3 weeks
Who it suits
Engineering organisations shipping frequently who need to show that code review, dependency checks, and release gates are real controls — not optional tooling.
What you receive
- Pipeline and branch-protection control map
- Sample of change tickets against production releases
- Findings on SAST / dependency / secret scanning coverage
- Practical hardening sequence for the next quarter
Format
Repo and CI walkthroughs with engineering leads, plus evidence sampling across recent releases. Pricing is informational; engagement details appear in the proposal.