GoWeBa strengthens platform security: automated testing and reinforced protections

Published on November 10, 2026

As artificial intelligence multiplies both opportunities and threats, the security of your data is not optional. This week, GoWeBa put its entire platform through two industry-recognized types of security testing, then fixed every finding before release. Result after remediation: no high-severity vulnerabilities.

Source code analysis (SAST)

More than 2,280 code files were checked against 114 security rules, including the OWASP Top 10, the global reference for web application risks. The test also confirms that no password or key is left in the code.

Live application testing (DAST)

Nearly 850 pages of the platform were crawled and analyzed the way an outside visitor would see them, to verify how they protect themselves.

Encryption of sensitive data

Access keys to your connected services are encrypted with the AES-256 standard, with strict integrity verification.

Secure email

Emails are sent only over encrypted, verified connections (TLS 1.2 or higher).

Protection against page hijacking

New security headers prevent a page of your workspace from being displayed inside another site without your knowledge, and enforce secure connections.

Redirects and electronic signatures

Redirect links and electronic signing now accept only verified GoWeBa destinations.

Instant disconnection of video conferencing apps

If you remove GoWeBa's access from your video conferencing service, your access keys are deleted immediately.

An ongoing effort

These tests are now part of our secure development lifecycle. Every change is checked automatically before going live, deployed without interruption, and can be rolled back in seconds. Security testing is repeated at least every quarter. Questions about the security of your data? Ask WEBA or visit the Knowledge Center.