Assess whether any use case of the web site or application causes the server or the client to exchange credentials without encryption.

A detailed web application test.

A detailed web application test.

A detailed recommendations to fix the server vulnerabilities.