Services
What Veyra does.
Service definitions, scope boundaries, and approved naming conventions. Engagement details are documented in a Statement of Work after intake.
Application Security Assessment
Gray-box assessment of a web application's authentication, authorization, business logic, and data handling. Manual validation with tool-assisted discovery.
Gray-Box API Penetration Test
Authenticated assessment of a REST or GraphQL API against the OWASP API Security Top 10 and provided documentation. Per-role coverage and object-level access checks.
Web Application Penetration Test
Full-coverage application assessment when source-assisted access is not available.
API Security Assessment
Targeted review of an API surface, integration boundaries, and webhook authenticity.
Security Evidence Pack
Marketplace-ready or vendor-questionnaire-ready evidence assembled from prior assessment work — Amazon SP-API, CASA, SOC 2 readiness.
Remediation Verification
Targeted retest against a remediated finding set, with a retest letter suitable for marketplace and reviewer submission.
Marketplace Security Readiness Review
Pre-submission review for marketplace and platform security questionnaires, including documentation-gap remediation guidance.