Likha ERP Is Secured Right — Proven by Deep Independent Vulnerability Assessment and Penetration Testing (VAPT)
< Return to main blog page
At Likha ERP, security isn’t a claim — it’s a verified fact.
Our platform has undergone a comprehensive, independent Vulnerability Assessment and Penetration Testing (VAPT) by DATA-PROVE Cybersecurity.
Security Tested Where It Counts
We don’t just rely on business policies or internal checks. LikhaERP was tested at the application layer — the level where real cyber threats strike.
DATA-PROVE’s team of certified penetration testers used the OWASP Top 10 framework — the global gold standard for web application security — to simulate real-world attack scenarios. Their assessment covered both authenticated and unauthenticated vectors, probing every critical function of the system.
What Was Tested
The audit went deep into the heart of LikhaERP’s web infrastructure:
API & GraphQL Endpoint Security — Ensuring no schema or data exposure vulnerabilities exist.
Session Management & Cookies — Validating protection against hijacking, replay, and timeout misuse.
Authentication Systems — Verifying login strength, password controls, and brute-force resistance.
Access Control Validation — Confirming that user roles and permissions are isolated and secure.
Verified by Independent Experts
The testing was led by Rhenzo Verdad, VAPT Lead of DATA-PROVE, under Project Reference DP216.
Conducted from October 31 to November 2, 2025, the full-scope test included both primary and backup staging environments — ensuring consistent security across deployments.
The result?
LikhaERP passed all application-level validation tests after rigorous review, confirming our platform’s ability to withstand real-world attack patterns.
Security by Design. Proven by Testing.
At LikhaERP, we design with collaboration in mind — and security at the core.
Independent testing ensures that every workflow, automation, and integration you use is backed by a foundation that’s been technically validated, not just policy-approved.
Because true security isn’t about saying you’re protected.
It’s about proving it — through transparency, third-party validation, and continuous improvement.