Application Security and IP Protection:

WCSPL has developed various enterprise-class applications that require strict security protocols. Security is assured at several levels, including authentication and authorization capabilities, communication and data security. Security risk is mitigated by an established application and Data Access Control policy:

• Once we complete your project to your exact specifications we release your proprietary source code and intellectual property with no licensing, no fees, and no hassles.
• All employees are under NDA and undergo security training
• Access to the infrastructure is strictly governed by the role of the person.
• No people outside of the core development team have access to production servers
• Access to the application is by invitation of the customer, with appropriate permissions, and only for Support purposes.
• We have a ready reference of software security audit companies empanelled with In-CERT, where the client must be provided with the security audit reports by an independent entity.
• Client applications are written utilizing secure coding practices, as well as secure architecture principles, such as principle of least privilege, of fail-safe, of economy of mechanism, of complete mediation, of open design, of separation of privilege, etc. The code is audited in house for SQL injection, penetration testing and cross-site scripting attacks. Input is normally taint-checked by the application before being processed.

Services include:

• Enterprise application integration
• Software product development
• Customer Relation Management applications
• Enterprise solutions
• API Development
• Web-enabling legacy applications.
• Implementation of B2B, G2C, C2C, G2G exchange.