As organisations do more business online and deliver services for convenience these systems are open to be exploited. Sapphire will test these systems, advise on the security configuration and vulnerabilities within a selected website application. Typically in two stages, the test will be completed initially with no authentication to the application and then with a valid user account for testing privilege escalation vulnerabilities, and assess any weaknesses with the authentication and authorisation mechanisms.