Our testing approach is oriented towards the OWASP top 10 and the OWASP Testing guide. The categories in there are: Configuration and Deployment Management Testing Identity Management Testing Authentication Testing Authorization Testing Session Management Testing Input Validation Testing Testing for Error Handling Testing for weak Cryptography Business Logic Testing Client Side Testing