Supported standards
Supported
Fluid Attacks conducts security testing to verify your application's adherence to requirements currently mapped to these standards:
- Agile Alliance
- BSIMM
- BIZEC APP
- BSA Framework for Secure Software
- CAPEC™
- CASA
- C2M2
- CCPA
- CERT® C
- SEI CERT® Oracle® Secure Coding Standard for Java™
- CIS
- CMMC
- CPRA
- CWE™
- CWE Top 25
- ePrivacy Directive
- FACTA
- FCRA
- FedRAMP
- FERPA
- FISMA
- GDPR
- GLBA
- HIPAA
- HITRUST CSF
- ISA/IEC 62443
- ISO/IEC 27001
- ISO/IEC 27002
- ISSAF
- LGPD
- MITRE ATT&CK®
- MISRA C
- MVSP
- NERC CIP
- NIST SP 800-53
- NIST SP 800-63B
- NIST SP 800-115
- NIST SP 800-171
- NIST CSF
- NIST SSDF
- NYDFS Cybersecurity Regulation
- New York SHIELD Act
- OSSTMM 3
- OWASP API Security Top 10
- OWASP ASVS
- OWASP MASVS
- OWASP Mobile Top 10
- OWASP SAMM
- OWASP Secure Coding practices
- OWASP Top 10
- OWASP Top 10 Privacy Risks
- PA-DSS
- PCI DSS
- PDPA
- PDPO
- POPIA
- PTES
- Resolution SB-2021-2126
- SANS 25
- SIG Core
- SIG Lite
- SOC 2®
- SWIFT CSCF
- WASC
- WASSEC
Unsupported
Currently, Fluid Attacks has not mapped security requirements to these standards:
- AWS Foundational Technical Review (FTR)
- Catalog of Problematic Data Actions and Problems (PDAP)
- Cloud Controls Matrix (CCM)
- DISA STIG
- Enduring Security Framework (ESF)
- FS-ISAC
- ISO/IEC 27017
- ISO/IEC 27018
- ISO/IEC 27701
- Microsoft SSPA
- NIST IR 8397
- NIST SP 800-163 Rev. 1
- NIST SP 800-161 Rev. 1
- OCC
- OWASP Web Security Testing Guide
- Secure Supply Chain Consumption Framework (S2C2F)
- SOX
- SOX ITGC
- TISAX
- Transparency & Consent Framework (TCF)
- TCPA
- TSS-WEB
Free trial
Search for vulnerabilities in your apps for free with Fluid Attacks' automated security testing! Start your 21-day free trial and discover the benefits of the Continuous Hacking Essential plan. If you prefer the Advanced plan, which includes the expertise of Fluid Attacks' hacking team, fill out this contact form.