AppCheck was born as an internal penetration testing tool in 2003 with the aim of accurately detecting critical security vulnerabilities at scale. Our challenge was to develop a tool that could automate as much of the penetration testing process as possible whilst retaining the level of accuracy that is critical when performing a security review.

With each penetration testing engagement, the team added new capabilities to the tool based on real world findings. Our goal was simple, if there was any way the attack could be automated, it was added to AppCheck.