--- title: Web Application Penetration Testing description: The long and short of it is that all web applications especially those that are accessible via the internet are vulnerable to attacks. The objective of an attack can range from something for an inquisitive teenager to do on a lonely night to conducting criminal activity... image: https://blog.nfocus.co.uk/hubfs/Web%20Application%20Security%20Testing.jpg --- - [0370 242 6235](tel:03702426235) - [Knowledge Centre](https://www.nfocus.co.uk/knowledge-centre/) - [Contact Us](https://www.nfocus.co.uk/contact-us/) [![nFocus ](https://blog.nfocus.co.uk/hs-fs/hubfs/New%20Logo_2025_v1.png?width=200&height=85&name=New%20Logo_2025_v1.png "nFocus ")](https://www.nfocus.co.uk/) - [Software Testing Services](https://www.nfocus.co.uk/software-testing/) - [Health Check](https://www.nfocus.co.uk/software-testing/healthcheck-software-testing-process-improvement/) - [Test Resourcing](https://www.nfocus.co.uk/software-testing/software-testing-services-test-resourcing/) - [Flexible Resource](https://www.nfocus.co.uk/software-testing/flexible-test-resource/) - [Outsourced Testing](https://www.nfocus.co.uk/software-testing/outsourced-testing-services/) - [Recruitment](https://www.nfocus.co.uk/software-testing/software-testing-recruitment/) - [Training](https://www.nfocus.co.uk/software-testing/software-testing-training/) - [Test Automation](https://www.nfocus.co.uk/software-testing/test-automation-solutions/) - [Readiness Assessment](https://www.nfocus.co.uk/software-testing/test-automation-strategy-plan/) - [Health Check](https://www.nfocus.co.uk/software-testing/automation-testing-services-review/) - [Consultancy](https://www.nfocus.co.uk/software-testing/test-automation-consulting-services/) - [Managed Service](https://www.nfocus.co.uk/software-testing/test-automation-managed-service/) - [Testing for Agile and DevOps](https://www.nfocus.co.uk/software-testing/devops-agile-test-automation/) - [Specialist Testing](https://www.nfocus.co.uk/software-testing/software-qa-services-specialist-testing/) - [User Acceptance Testing](https://www.nfocus.co.uk/software-testing/uat-services/) - [Performance and Load Testing Service](https://www.nfocus.co.uk/software-testing/performance-testing-services/) - [Mobile App Testing](https://www.nfocus.co.uk/software-testing/mobile-application-testing-services/) - [Penetration Testing](https://www.nfocus.co.uk/software-testing/pen-testing-companies/) - [Security Testing](https://www.nfocus.co.uk/software-testing/security-testing-services/) - [Test Data Services (GDPR)](https://www.nfocus.co.uk/software-testing/test-data-services-gdpr/) - [Areas of Expertise](https://www.nfocus.co.uk/expertise/) - [Digital Transformation](https://www.nfocus.co.uk/expertise/digital-assurance-services-transformation-testing/) - [Agile / DevOps](https://www.nfocus.co.uk/expertise/devops-agile-testing-services/) - [Microservices](https://www.nfocus.co.uk/expertise/testing-microservices/) - [Internet of Things (IoT)](https://www.nfocus.co.uk/expertise/iot-testing/) - [Why nFocus](https://www.nfocus.co.uk/why-nfocus/) - [Awards](https://www.nfocus.co.uk/why-nfocus/software-testing-awards/) - [Testimonials](https://www.nfocus.co.uk/why-nfocus/nfocus-testimonials/) - [History](https://www.nfocus.co.uk/why-nfocus/nfocus-history/) - [Client list](https://www.nfocus.co.uk/why-nfocus/nfocus-client-list/) - [Industry Experience](https://www.nfocus.co.uk/why-nfocus/nfocus-experience/) - [News](https://www.nfocus.co.uk/why-nfocus/nfocus-news/) - [Meet the Team](https://www.nfocus.co.uk/why-nfocus/meet-the-nfocus-team/) - [Our Values](https://www.nfocus.co.uk/why-nfocus/our-values/) - [Web Accessibility Statement](https://www.nfocus.co.uk/why-nfocus/web-accessibility-statement/) - [Privacy policy](https://www.nfocus.co.uk/why-nfocus/privacy-policy-and-terms-and-conditions/) - [Knowledge Centre](https://www.nfocus.co.uk/knowledge-centre/) - [Contact Us](https://www.nfocus.co.uk/contact-us/) ## The Blog ![nfocus-laptop-700x600-img](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/nfocus-laptop-700x600-img.png?t=1536829459358) ## Web Application Penetration Testing Posted by [The nFocus Team](https://blog.nfocus.co.uk/author/the-nfocus-team) on 11/06/2018 - [Tweet](https://twitter.com/share) # Understanding Web Application Security If the Pentagon and the Whitehouse can both be hacked, then so can you. Now, please don’t think for a second that I think the members of the Pentagon and Whitehouse are in any way more intelligent or better than you (I’m convinced of quite the opposite – without even meeting you), but I am assuming they have pretty good cyber security. ![Web Application Security Testing](https://blog.nfocus.co.uk/hs-fs/hubfs/Web%20Application%20Security%20Testing.jpg?width=522&name=Web%20Application%20Security%20Testing.jpg) The long and short of it is that all web applications especially those that are accessible via the internet are vulnerable to attacks. The objective of an attack can range from something for an inquisitive teenager to do on a lonely night to conducting criminal activity such as using your server for their own purposes to stealing data. Despite media coverage and recognition of the issue by most, I still get the sense that many people assume they are at low risk compared to everyone else. This is the same for big corporates, small businesses and one-man band websites. Three misguided things I often hear are: 1. I don’t need to pen test as my hosting provider has a good firewall. There is quite a common assumption that a good firewall is enough to keep a web app secure (particularly with hosted systems, PAAS or customised SAAS solutions). They then conclude incorrectly that ensuring the site and the code is not able to be hacked is unnecessary. This is flawed. And reckless. And stupid. A firewall is simply the first line of defence. If breached, or even sidestepped completely as is often the case, a website should be able to withstand an attack. 2. If a hacker really wants to get in, then they will do so regardless of what I do. Well, yes, maybe. However, don’t assume that every hacker has the skill, time or tenacity required to hack in. If you make it hard enough, the vast majority of attacks will fail. By minimising the vulnerabilities and creating multiple lines of defence you are making it more difficult to be hacked. Attackers look to exploit the vulnerabilities. In the same way you need to minimise the vulnerabilities of your house. As well as locking the door, you still hide the jewellery when you go on holiday. 3. My site doesn’t have any valuable data or anything worth being hacked for It’s true that the majority of breaches that hit the headlines are often about data theft however the majority of hacks to use your server as an email relay for spam, or to set up a temporary web server, normally to conduct illegal activity. Using your server to mine Bitcoins is getting more common these days. If compromised, your website can be used to redirect your visitors to fake or bogus websites, install viruses on visitors’ own computers (sometimes to steal their personal data), send emails or attack other websites. If I had to summarise, there are six things you need to do to keep your site safe: 1. Make sure admin passwords are super complex and safe. Also change the admin username to be something a hacker won’t guess. Never leave it as “admin”. 2. Get a good firewall 3. Get some good anti-virus software 4. Keep your software, including database versions, operating system and WordPress up to date with latest patches and releases. 5. Ensure good coding standards 6. Have your site scanned and penetration tested on a regularly basis to identify vulnerabilities so that they can be fixed. Assuming therefore that you have secure passwords, you have a good firewall and anti-virus. I’m pretty sure that most people have no idea whether the coding standards your developers might or might not have had, might or might or might not have been adhered to, so what do you do next? The answer is to perform a vulnerability assessment (sometimes called a security scan) and a penetration test (sometimes called a security test). A security scan and security test will let you know how secure your web app is, allowing you to make any necessary changes. If a tester can compromise your site, server or network, then a hacker can too. **Is a security test the same thing as a security scan?** I know that some may argue with me, but I’m pretty comfortable stating that a security test and a penetration test are the same thing and the terms can be used interchangeably. However, sometimes the phrase security test and security scan are wrongly used interchangeably. A security scan (or vulnerability assessment) uses a set of automated tools to scan your server, infrastructure and web application to look for known vulnerabilities – such as out of date patches, old versions of software operating systems or database systems. In general, these vulnerabilities can be easily removed with an upgrade. A penetration test or security test often starts with a vulnerability scan, to see if there are any flaws that can be exploited and give the security tester (who is simulating a hacker) an entry point into your system. A penetration tester (a real person) then tries many different ways to hack into your system. The objective of the penetration test is to identify the various ways a system can be hacked so that those vulnerabilities can be rectified. Like a functional test simulates real user behaviour of a system, a good security test simulates real world attacks by hackers. A penetration tester will adopt the role of a hacker attempt to breach your defences to get access to your web application, and ultimately the data, web pages, server or network. Once inside, what they can get up to and exploit depends on the further defences you may or may not have in pace. Such things as segregation of data and application code, different admin usernames and passwords for different components of your technology stack, anti-virus software, encryption will all limit the damage that can be caused once the perimeter is breached. Typically, a security test will identify many (we are talking in the tens or hundreds) of vulnerabilities. These will be prioritised as high, medium and low risk so that the development and infrastructure team can then fix them. Like functional testing, the fixing should be followed by a second round of testing to make sure the vulnerabilities are no longer present. **How often should I security test?** It's recommended that you execute a security test with every release and at least once a year as cyber-attacks are constantly evolving. It’s also really easy to inject vulnerabilities into your code. Good penetration testers will be aware of all the vulnerabilities and new techniques exploited by hackers as soon as they become known. Topics: [Software Testing](https://blog.nfocus.co.uk/topic/software-testing), [Security Testing](https://blog.nfocus.co.uk/topic/security-testing) ### nFocus Blog Welcome to the nFocus software testing blog. As thought leaders and technical innovators, we created this blog to distil our thoughts, ideas and musings on improving software quality. Fill out the form below to receive future communications from nFocus including our latest: - Blog articles - White Papers - and plenty more! ### Follow us Follow us on LinkedIn to see our latest content! ### Subscribe Here! ### Recent Posts ### Posts by Topic - [Software Testing (203)](https://blog.nfocus.co.uk/topic/software-testing) - [Test Teams (24)](https://blog.nfocus.co.uk/topic/test-teams) - [test automation (18)](https://blog.nfocus.co.uk/topic/test-automation) - [Digital Transformation (17)](https://blog.nfocus.co.uk/topic/digital-transformation) - [Agile, (16)](https://blog.nfocus.co.uk/topic/agile) - [SDET (13)](https://blog.nfocus.co.uk/topic/sdet) - [User Acceptance Testing (12)](https://blog.nfocus.co.uk/topic/user-acceptance-testing) - [Quality Assurance (11)](https://blog.nfocus.co.uk/topic/quality-assurance) - [DevOps (9)](https://blog.nfocus.co.uk/topic/devops) - [Test Management (9)](https://blog.nfocus.co.uk/topic/test-management) - [Agile Test Strategy (8)](https://blog.nfocus.co.uk/topic/agile-test-strategy) - [DevOps and Testing (8)](https://blog.nfocus.co.uk/topic/devops-and-testing) - [Test Automation Approach (7)](https://blog.nfocus.co.uk/topic/test-automation-approach) - [Testing Techniques (7)](https://blog.nfocus.co.uk/topic/testing-techniques) - [nFocus SDET Academy (7)](https://blog.nfocus.co.uk/topic/nfocus-sdet-academy) - [softwaretesting (7)](https://blog.nfocus.co.uk/topic/softwaretesting) - [Remote Working (6)](https://blog.nfocus.co.uk/topic/remote-working) - [Software Test Process (6)](https://blog.nfocus.co.uk/topic/software-test-process) - [Software Testing Techniques (6)](https://blog.nfocus.co.uk/topic/software-testing-techniques) - [Tech Roles (6)](https://blog.nfocus.co.uk/topic/tech-roles) - [Test Manager (6)](https://blog.nfocus.co.uk/topic/test-manager) - [Testing (6)](https://blog.nfocus.co.uk/topic/testing) - [UAT (6)](https://blog.nfocus.co.uk/topic/uat) - [communication (6)](https://blog.nfocus.co.uk/topic/communication) - [Benefits of Agile (5)](https://blog.nfocus.co.uk/topic/benefits-of-agile) - [Regression Testing (5)](https://blog.nfocus.co.uk/topic/regression-testing) - [Scrum (5)](https://blog.nfocus.co.uk/topic/scrum) - [Test Maturity (5)](https://blog.nfocus.co.uk/topic/test-maturity) - [Test Tools (5)](https://blog.nfocus.co.uk/topic/test-tools) - [Agile Testing (4)](https://blog.nfocus.co.uk/topic/agile-testing) - [Load and Performance Testing (4)](https://blog.nfocus.co.uk/topic/load-and-performance-testing) - [Personal Stories (4)](https://blog.nfocus.co.uk/topic/personal-stories) - [Software Development Life Cycle (4)](https://blog.nfocus.co.uk/topic/software-development-life-cycle) - [Software Test Plan (4)](https://blog.nfocus.co.uk/topic/software-test-plan) - [TEST AUTOMATION BENEFITS (4)](https://blog.nfocus.co.uk/topic/test-automation-benefits) - [Test Automation Frameworks (4)](https://blog.nfocus.co.uk/topic/test-automation-frameworks) - [Artificial Intelligence (3)](https://blog.nfocus.co.uk/topic/artificial-intelligence) - [Automated regression testing (3)](https://blog.nfocus.co.uk/topic/automated-regression-testing) - [Interview Questions (3)](https://blog.nfocus.co.uk/topic/interview-questions) - [Mobile App Testing (3)](https://blog.nfocus.co.uk/topic/mobile-app-testing) - [Risk Based Testing (3)](https://blog.nfocus.co.uk/topic/risk-based-testing) - [Security Testing (3)](https://blog.nfocus.co.uk/topic/security-testing) - [Software Failures (3)](https://blog.nfocus.co.uk/topic/software-failures) - [Software Testing Assessment (3)](https://blog.nfocus.co.uk/topic/software-testing-assessment) - [Software Testing Consultancy (3)](https://blog.nfocus.co.uk/topic/software-testing-consultancy) - [Test Data (3)](https://blog.nfocus.co.uk/topic/test-data) - [Test Requirements (3)](https://blog.nfocus.co.uk/topic/test-requirements) - [Women in Tech (3)](https://blog.nfocus.co.uk/topic/women-in-tech) - [Workplace Diversity (3)](https://blog.nfocus.co.uk/topic/workplace-diversity) - [improve software testing (3)](https://blog.nfocus.co.uk/topic/improve-software-testing) - [software testing life cycle (3)](https://blog.nfocus.co.uk/topic/software-testing-life-cycle) - [test plan template (3)](https://blog.nfocus.co.uk/topic/test-plan-template) - [Agile Test Plan (2)](https://blog.nfocus.co.uk/topic/agile-test-plan) - [App Usability Testing (2)](https://blog.nfocus.co.uk/topic/app-usability-testing) - [Black Box Testing (2)](https://blog.nfocus.co.uk/topic/black-box-testing) - [Computer Programmers (2)](https://blog.nfocus.co.uk/topic/computer-programmers) - [Developer Based Testing (2)](https://blog.nfocus.co.uk/topic/developer-based-testing) - [ERP Testing (2)](https://blog.nfocus.co.uk/topic/erp-testing) - [GDPR (2)](https://blog.nfocus.co.uk/topic/gdpr) - [IoT Projects (2)](https://blog.nfocus.co.uk/topic/iot-projects) - [Lean Testing (2)](https://blog.nfocus.co.uk/topic/lean-testing) - [Peformance Testing (2)](https://blog.nfocus.co.uk/topic/peformance-testing) - [Performance Testing (2)](https://blog.nfocus.co.uk/topic/performance-testing) - [Project Management (2)](https://blog.nfocus.co.uk/topic/project-management) - [Requirements Validation (2)](https://blog.nfocus.co.uk/topic/requirements-validation) - [Returning to the office (2)](https://blog.nfocus.co.uk/topic/returning-to-the-office) - [Security Testing Strategy (2)](https://blog.nfocus.co.uk/topic/security-testing-strategy) - [Technology (2)](https://blog.nfocus.co.uk/topic/technology) - [Test Management Tools (2)](https://blog.nfocus.co.uk/topic/test-management-tools) - [Test Planning (2)](https://blog.nfocus.co.uk/topic/test-planning) - [Testing in DevOps (2)](https://blog.nfocus.co.uk/topic/testing-in-devops) - [Time Management (2)](https://blog.nfocus.co.uk/topic/time-management) - [Web Accessibility (2)](https://blog.nfocus.co.uk/topic/web-accessibility) - [Women in IT (2)](https://blog.nfocus.co.uk/topic/women-in-it) - [Working from Home (2)](https://blog.nfocus.co.uk/topic/working-from-home) - [digital assurance (2)](https://blog.nfocus.co.uk/topic/digital-assurance) - [software disasters (2)](https://blog.nfocus.co.uk/topic/software-disasters) - [success (2)](https://blog.nfocus.co.uk/topic/success) - [testing consultancy (2)](https://blog.nfocus.co.uk/topic/testing-consultancy) - [testing methodologies (2)](https://blog.nfocus.co.uk/topic/testing-methodologies) - [testingcentreofexcellence (2)](https://blog.nfocus.co.uk/topic/testingcentreofexcellence) - [2019 (1)](https://blog.nfocus.co.uk/topic/2019) - [AI (1)](https://blog.nfocus.co.uk/topic/ai) - [Agile Project Management (1)](https://blog.nfocus.co.uk/topic/agile-project-management) - [Agile Testing Interview Questions (1)](https://blog.nfocus.co.uk/topic/agile-testing-interview-questions) - [Agile vs Scrum (1)](https://blog.nfocus.co.uk/topic/agile-vs-scrum) - [Automated Security Testing (1)](https://blog.nfocus.co.uk/topic/automated-security-testing) - [Automated end to end testing (1)](https://blog.nfocus.co.uk/topic/automated-end-to-end-testing) - [Business Assurance (1)](https://blog.nfocus.co.uk/topic/business-assurance) - [Data Storage (1)](https://blog.nfocus.co.uk/topic/data-storage) - [Decision Making (1)](https://blog.nfocus.co.uk/topic/decision-making) - [Defect Triage (1)](https://blog.nfocus.co.uk/topic/defect-triage) - [DevOps Release Management (1)](https://blog.nfocus.co.uk/topic/devops-release-management) - [DevSecOps (1)](https://blog.nfocus.co.uk/topic/devsecops) - [Digital Assurance Framework (1)](https://blog.nfocus.co.uk/topic/digital-assurance-framework) - [Document Review Checklist (1)](https://blog.nfocus.co.uk/topic/document-review-checklist) - [Early Testing (1)](https://blog.nfocus.co.uk/topic/early-testing) - [Functional Testing (1)](https://blog.nfocus.co.uk/topic/functional-testing) - [Future Tech (1)](https://blog.nfocus.co.uk/topic/future-tech) - [Future Trends (1)](https://blog.nfocus.co.uk/topic/future-trends) - [Higher Education Sector (1)](https://blog.nfocus.co.uk/topic/higher-education-sector) - [IT Governance (1)](https://blog.nfocus.co.uk/topic/it-governance) - [Inclusion (1)](https://blog.nfocus.co.uk/topic/inclusion) - [Load Test Tools (1)](https://blog.nfocus.co.uk/topic/load-test-tools) - [Load Testing Tools Comparison (1)](https://blog.nfocus.co.uk/topic/load-testing-tools-comparison) - [Non-Functional Requirements (1)](https://blog.nfocus.co.uk/topic/non-functional-requirements) - [Performance Engineering (1)](https://blog.nfocus.co.uk/topic/performance-engineering) - [Performance Testing Basics (1)](https://blog.nfocus.co.uk/topic/performance-testing-basics) - [Performance Testing Entry and Exit Criteria (1)](https://blog.nfocus.co.uk/topic/performance-testing-entry-and-exit-criteria) - [Performance Testing Techniques (1)](https://blog.nfocus.co.uk/topic/performance-testing-techniques) - [Problem Solving (1)](https://blog.nfocus.co.uk/topic/problem-solving) - [QA Testing (1)](https://blog.nfocus.co.uk/topic/qa-testing) - [Quality Control (1)](https://blog.nfocus.co.uk/topic/quality-control) - [Regression Testing Checklist (1)](https://blog.nfocus.co.uk/topic/regression-testing-checklist) - [Resourcing (1)](https://blog.nfocus.co.uk/topic/resourcing) - [Stakeholders (1)](https://blog.nfocus.co.uk/topic/stakeholders) - [Static Analysis (1)](https://blog.nfocus.co.uk/topic/static-analysis) - [Temporal Testing (1)](https://blog.nfocus.co.uk/topic/temporal-testing) - [Test Estimation (1)](https://blog.nfocus.co.uk/topic/test-estimation) - [Test Insights (1)](https://blog.nfocus.co.uk/topic/test-insights) - [Test Scripts (1)](https://blog.nfocus.co.uk/topic/test-scripts) - [Testing Costs (1)](https://blog.nfocus.co.uk/topic/testing-costs) - [Testing Terms (1)](https://blog.nfocus.co.uk/topic/testing-terms) - [Time Travel Testing (1)](https://blog.nfocus.co.uk/topic/time-travel-testing) - [White Box Testing (1)](https://blog.nfocus.co.uk/topic/white-box-testing) - [Workplace Equality (1)](https://blog.nfocus.co.uk/topic/workplace-equality) - [failure (1)](https://blog.nfocus.co.uk/topic/failure) - [halloween (1)](https://blog.nfocus.co.uk/topic/halloween) - [internet of things (1)](https://blog.nfocus.co.uk/topic/internet-of-things) - [load testing (1)](https://blog.nfocus.co.uk/topic/load-testing) - [nFocus (1)](https://blog.nfocus.co.uk/topic/nfocus) - [productivity (1)](https://blog.nfocus.co.uk/topic/productivity) - [regression testing advantages (1)](https://blog.nfocus.co.uk/topic/regression-testing-advantages) - [regression testing and retesting (1)](https://blog.nfocus.co.uk/topic/regression-testing-and-retesting) - [testing times (1)](https://blog.nfocus.co.uk/topic/testing-times) - [waterfall (1)](https://blog.nfocus.co.uk/topic/waterfall) see all ### Posts by Topic - [Software Testing (203)](https://blog.nfocus.co.uk/topic/software-testing) - [Test Teams (24)](https://blog.nfocus.co.uk/topic/test-teams) - [test automation (18)](https://blog.nfocus.co.uk/topic/test-automation) - [Digital Transformation (17)](https://blog.nfocus.co.uk/topic/digital-transformation) - [Agile, (16)](https://blog.nfocus.co.uk/topic/agile) - [SDET (13)](https://blog.nfocus.co.uk/topic/sdet) - [User Acceptance Testing (12)](https://blog.nfocus.co.uk/topic/user-acceptance-testing) - [Quality Assurance (11)](https://blog.nfocus.co.uk/topic/quality-assurance) - [DevOps (9)](https://blog.nfocus.co.uk/topic/devops) - [Test Management (9)](https://blog.nfocus.co.uk/topic/test-management) - [Agile Test Strategy (8)](https://blog.nfocus.co.uk/topic/agile-test-strategy) - [DevOps and Testing (8)](https://blog.nfocus.co.uk/topic/devops-and-testing) - [Test Automation Approach (7)](https://blog.nfocus.co.uk/topic/test-automation-approach) - [Testing Techniques (7)](https://blog.nfocus.co.uk/topic/testing-techniques) - [nFocus SDET Academy (7)](https://blog.nfocus.co.uk/topic/nfocus-sdet-academy) - [softwaretesting (7)](https://blog.nfocus.co.uk/topic/softwaretesting) - [Remote Working (6)](https://blog.nfocus.co.uk/topic/remote-working) - [Software Test Process (6)](https://blog.nfocus.co.uk/topic/software-test-process) - [Software Testing Techniques (6)](https://blog.nfocus.co.uk/topic/software-testing-techniques) - [Tech Roles (6)](https://blog.nfocus.co.uk/topic/tech-roles) - [Test Manager (6)](https://blog.nfocus.co.uk/topic/test-manager) - [Testing (6)](https://blog.nfocus.co.uk/topic/testing) - [UAT (6)](https://blog.nfocus.co.uk/topic/uat) - [communication (6)](https://blog.nfocus.co.uk/topic/communication) - [Benefits of Agile (5)](https://blog.nfocus.co.uk/topic/benefits-of-agile) - [Regression Testing (5)](https://blog.nfocus.co.uk/topic/regression-testing) - [Scrum (5)](https://blog.nfocus.co.uk/topic/scrum) - [Test Maturity (5)](https://blog.nfocus.co.uk/topic/test-maturity) - [Test Tools (5)](https://blog.nfocus.co.uk/topic/test-tools) - [Agile Testing (4)](https://blog.nfocus.co.uk/topic/agile-testing) - [Load and Performance Testing (4)](https://blog.nfocus.co.uk/topic/load-and-performance-testing) - [Personal Stories (4)](https://blog.nfocus.co.uk/topic/personal-stories) - [Software Development Life Cycle (4)](https://blog.nfocus.co.uk/topic/software-development-life-cycle) - [Software Test Plan (4)](https://blog.nfocus.co.uk/topic/software-test-plan) - [TEST AUTOMATION BENEFITS (4)](https://blog.nfocus.co.uk/topic/test-automation-benefits) - [Test Automation Frameworks (4)](https://blog.nfocus.co.uk/topic/test-automation-frameworks) - [Artificial Intelligence (3)](https://blog.nfocus.co.uk/topic/artificial-intelligence) - [Automated regression testing (3)](https://blog.nfocus.co.uk/topic/automated-regression-testing) - [Interview Questions (3)](https://blog.nfocus.co.uk/topic/interview-questions) - [Mobile App Testing (3)](https://blog.nfocus.co.uk/topic/mobile-app-testing) - [Risk Based Testing (3)](https://blog.nfocus.co.uk/topic/risk-based-testing) - [Security Testing (3)](https://blog.nfocus.co.uk/topic/security-testing) - [Software Failures (3)](https://blog.nfocus.co.uk/topic/software-failures) - [Software Testing Assessment (3)](https://blog.nfocus.co.uk/topic/software-testing-assessment) - [Software Testing Consultancy (3)](https://blog.nfocus.co.uk/topic/software-testing-consultancy) - [Test Data (3)](https://blog.nfocus.co.uk/topic/test-data) - [Test Requirements (3)](https://blog.nfocus.co.uk/topic/test-requirements) - [Women in Tech (3)](https://blog.nfocus.co.uk/topic/women-in-tech) - [Workplace Diversity (3)](https://blog.nfocus.co.uk/topic/workplace-diversity) - [improve software testing (3)](https://blog.nfocus.co.uk/topic/improve-software-testing) - [software testing life cycle (3)](https://blog.nfocus.co.uk/topic/software-testing-life-cycle) - [test plan template (3)](https://blog.nfocus.co.uk/topic/test-plan-template) - [Agile Test Plan (2)](https://blog.nfocus.co.uk/topic/agile-test-plan) - [App Usability Testing (2)](https://blog.nfocus.co.uk/topic/app-usability-testing) - [Black Box Testing (2)](https://blog.nfocus.co.uk/topic/black-box-testing) - [Computer Programmers (2)](https://blog.nfocus.co.uk/topic/computer-programmers) - [Developer Based Testing (2)](https://blog.nfocus.co.uk/topic/developer-based-testing) - [ERP Testing (2)](https://blog.nfocus.co.uk/topic/erp-testing) - [GDPR (2)](https://blog.nfocus.co.uk/topic/gdpr) - [IoT Projects (2)](https://blog.nfocus.co.uk/topic/iot-projects) - [Lean Testing (2)](https://blog.nfocus.co.uk/topic/lean-testing) - [Peformance Testing (2)](https://blog.nfocus.co.uk/topic/peformance-testing) - [Performance Testing (2)](https://blog.nfocus.co.uk/topic/performance-testing) - [Project Management (2)](https://blog.nfocus.co.uk/topic/project-management) - [Requirements Validation (2)](https://blog.nfocus.co.uk/topic/requirements-validation) - [Returning to the office (2)](https://blog.nfocus.co.uk/topic/returning-to-the-office) - [Security Testing Strategy (2)](https://blog.nfocus.co.uk/topic/security-testing-strategy) - [Technology (2)](https://blog.nfocus.co.uk/topic/technology) - [Test Management Tools (2)](https://blog.nfocus.co.uk/topic/test-management-tools) - [Test Planning (2)](https://blog.nfocus.co.uk/topic/test-planning) - [Testing in DevOps (2)](https://blog.nfocus.co.uk/topic/testing-in-devops) - [Time Management (2)](https://blog.nfocus.co.uk/topic/time-management) - [Web Accessibility (2)](https://blog.nfocus.co.uk/topic/web-accessibility) - [Women in IT (2)](https://blog.nfocus.co.uk/topic/women-in-it) - [Working from Home (2)](https://blog.nfocus.co.uk/topic/working-from-home) - [digital assurance (2)](https://blog.nfocus.co.uk/topic/digital-assurance) - [software disasters (2)](https://blog.nfocus.co.uk/topic/software-disasters) - [success (2)](https://blog.nfocus.co.uk/topic/success) - [testing consultancy (2)](https://blog.nfocus.co.uk/topic/testing-consultancy) - [testing methodologies (2)](https://blog.nfocus.co.uk/topic/testing-methodologies) - [testingcentreofexcellence (2)](https://blog.nfocus.co.uk/topic/testingcentreofexcellence) - [2019 (1)](https://blog.nfocus.co.uk/topic/2019) - [AI (1)](https://blog.nfocus.co.uk/topic/ai) - [Agile Project Management (1)](https://blog.nfocus.co.uk/topic/agile-project-management) - [Agile Testing Interview Questions (1)](https://blog.nfocus.co.uk/topic/agile-testing-interview-questions) - [Agile vs Scrum (1)](https://blog.nfocus.co.uk/topic/agile-vs-scrum) - [Automated Security Testing (1)](https://blog.nfocus.co.uk/topic/automated-security-testing) - [Automated end to end testing (1)](https://blog.nfocus.co.uk/topic/automated-end-to-end-testing) - [Business Assurance (1)](https://blog.nfocus.co.uk/topic/business-assurance) - [Data Storage (1)](https://blog.nfocus.co.uk/topic/data-storage) - [Decision Making (1)](https://blog.nfocus.co.uk/topic/decision-making) - [Defect Triage (1)](https://blog.nfocus.co.uk/topic/defect-triage) - [DevOps Release Management (1)](https://blog.nfocus.co.uk/topic/devops-release-management) - [DevSecOps (1)](https://blog.nfocus.co.uk/topic/devsecops) - [Digital Assurance Framework (1)](https://blog.nfocus.co.uk/topic/digital-assurance-framework) - [Document Review Checklist (1)](https://blog.nfocus.co.uk/topic/document-review-checklist) - [Early Testing (1)](https://blog.nfocus.co.uk/topic/early-testing) - [Functional Testing (1)](https://blog.nfocus.co.uk/topic/functional-testing) - [Future Tech (1)](https://blog.nfocus.co.uk/topic/future-tech) - [Future Trends (1)](https://blog.nfocus.co.uk/topic/future-trends) - [Higher Education Sector (1)](https://blog.nfocus.co.uk/topic/higher-education-sector) - [IT Governance (1)](https://blog.nfocus.co.uk/topic/it-governance) - [Inclusion (1)](https://blog.nfocus.co.uk/topic/inclusion) - [Load Test Tools (1)](https://blog.nfocus.co.uk/topic/load-test-tools) - [Load Testing Tools Comparison (1)](https://blog.nfocus.co.uk/topic/load-testing-tools-comparison) - [Non-Functional Requirements (1)](https://blog.nfocus.co.uk/topic/non-functional-requirements) - [Performance Engineering (1)](https://blog.nfocus.co.uk/topic/performance-engineering) - [Performance Testing Basics (1)](https://blog.nfocus.co.uk/topic/performance-testing-basics) - [Performance Testing Entry and Exit Criteria (1)](https://blog.nfocus.co.uk/topic/performance-testing-entry-and-exit-criteria) - [Performance Testing Techniques (1)](https://blog.nfocus.co.uk/topic/performance-testing-techniques) - [Problem Solving (1)](https://blog.nfocus.co.uk/topic/problem-solving) - [QA Testing (1)](https://blog.nfocus.co.uk/topic/qa-testing) - [Quality Control (1)](https://blog.nfocus.co.uk/topic/quality-control) - [Regression Testing Checklist (1)](https://blog.nfocus.co.uk/topic/regression-testing-checklist) - [Resourcing (1)](https://blog.nfocus.co.uk/topic/resourcing) - [Stakeholders (1)](https://blog.nfocus.co.uk/topic/stakeholders) - [Static Analysis (1)](https://blog.nfocus.co.uk/topic/static-analysis) - [Temporal Testing (1)](https://blog.nfocus.co.uk/topic/temporal-testing) - [Test Estimation (1)](https://blog.nfocus.co.uk/topic/test-estimation) - [Test Insights (1)](https://blog.nfocus.co.uk/topic/test-insights) - [Test Scripts (1)](https://blog.nfocus.co.uk/topic/test-scripts) - [Testing Costs (1)](https://blog.nfocus.co.uk/topic/testing-costs) - [Testing Terms (1)](https://blog.nfocus.co.uk/topic/testing-terms) - [Time Travel Testing (1)](https://blog.nfocus.co.uk/topic/time-travel-testing) - [White Box Testing (1)](https://blog.nfocus.co.uk/topic/white-box-testing) - [Workplace Equality (1)](https://blog.nfocus.co.uk/topic/workplace-equality) - [failure (1)](https://blog.nfocus.co.uk/topic/failure) - [halloween (1)](https://blog.nfocus.co.uk/topic/halloween) - [internet of things (1)](https://blog.nfocus.co.uk/topic/internet-of-things) - [load testing (1)](https://blog.nfocus.co.uk/topic/load-testing) - [nFocus (1)](https://blog.nfocus.co.uk/topic/nfocus) - [productivity (1)](https://blog.nfocus.co.uk/topic/productivity) - [regression testing advantages (1)](https://blog.nfocus.co.uk/topic/regression-testing-advantages) - [regression testing and retesting (1)](https://blog.nfocus.co.uk/topic/regression-testing-and-retesting) - [testing times (1)](https://blog.nfocus.co.uk/topic/testing-times) - [waterfall (1)](https://blog.nfocus.co.uk/topic/waterfall) see all #### PROUDLY WORKING WITH: ![kier](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/kier-logo-200x200.png) ![microsoft](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/microsoft_logo-1.png) ![brewin-dolphin](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/brewin-dolphin_white_sm-200x200.png) ![axa](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/axa-logo_1-200x200.png) ![harrods](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/harrods-logo-200x200.png) #### Have a question? Request a call back now. Whether you have a question about one of our services, how we work or how we can support your specific needs please request a call back here and one of our friendly team will be in touch. ![nfocus](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/nfocus_logo%20(1).png) ![microsoft](https://blog.nfocus.co.uk/hubfs/Nfocus_Aug2018/images/microsoft_logo.png)  #### Find us **Head Office:** nFocus Testing, e-Innovation Centre, Priorslee, Telford, Shropshire TF2 9FT **nFocus Norwich Office:** 51-59 Rose Ln, Norwich NR1 1BY  #### Contact us 0370 242 6235  [info@nfocus.co.uk](mailto:info@nfocus.co.uk) #### Follow us - [linkedin](https://uk.linkedin.com/company/nfocus-ltd) - [twitter](https://twitter.com/nfocus_ltd) #### Terms and conditions © 2023 nFocus Limited. All rights reserved. The information on this website (and its associated Blog and Twitter feed) is for general interest only and should not be considered professional advice. Any action or inaction taken as a result of this information is not the responsibility of nFocus Testing. Professional advice should always be sought in relation to software testing. Company registration number (3942714) #### Site map - [Home](https://www.nfocus.co.uk/) - [About](https://www.nfocus.co.uk/why-nfocus/nfocus-history/) - [Why us](https://www.nfocus.co.uk/why-nfocus/) - [Services](https://www.nfocus.co.uk/software-testing/) - [Testing automation](https://www.nfocus.co.uk/software-testing/test-automation-solutions/) - [Testing resourcing](https://www.nfocus.co.uk/software-testing/software-testing-services-test-resourcing/) - [Health check](https://www.nfocus.co.uk/software-testing/healthcheck-software-testing-process-improvement/) - [Specialist testing](https://www.nfocus.co.uk/software-testing/software-qa-services-specialist-testing/) - [Expertise](https://www.nfocus.co.uk/expertise/) - [Knowledge centre](https://www.nfocus.co.uk/knowledge-centre/) - [Site map](https://www.nfocus.co.uk/site-map/) - [Contact us](https://www.nfocus.co.uk/contact-us/)