ThinkSmart Application Security Information

ThinkSmart is an information security consultancy specialising in application (software) security. We help our clients design secure business processes, we advise them on application security frameworks, we assist them with application security assurance (testing) and train their developers to build security into the software development life cycle. 
 Our goal is to help clients secure the most vulnerable part of their information system infrastructure – their business applications. A badly coded application can undo the best attempts at securing an organisation at the physical and network layers. We work with software development teams to formalise their security efforts, educate them about security, assist with secure design and review code for vulnerabilities. We have a strong software development background, particularly in developing web-based business-critical applications for financial institutions. We built, operate, and continue to maintain an e-commerce payment solution where we are able to "practice what we preach" about application security. We also have extensive experience in designing mobile security solutions that make effective use of the various channels and security opportunities presented by modern mobile devices. Our experience in information security extends beyond application security – we have developed information security management systems (policies & procedures), assisted clients with ISAE3402 assurance audits, designed PKI systems (incl. key ceremony facilitation, CP/CPS development) and assisted clients to develop information technology strategies in areas other than security. Today we use this experience to support our application security-focussed offerings. 

 ThinkSmart’s managing members are Paul van Woudenberg and Theo van Niekerk. We are based in Stellenbosch (near Cape Town), South Africa.