WilAccount Sincronizando...
WilAccount Sincronizando...
Dynamic application security testing (DAST), 29 forensic evidence artifacts, 19 fully mitigated CVSS v3.1 scenarios, and public fiscal trust for governments and enterprises in West Africa.
Dynamic CSPRNG nonces per request, 2-year HSTS max-age, and strict frame-ancestors enforcement.
Strict server-side environment isolation; zero database credentials or JWT secrets exposed in frontend bundles.
Automatic 15-minute account lockout and button freeze triggered on the 5th consecutive invalid login attempt.
Zero critical or high vulnerabilities remaining across all 39 ERP modules and edge firewall layer.
Digital Governance, Critical Systems & WAEMU International Compliance Division
Soberano Contábil S/A has successfully concluded the dynamic application security testing (DAST) and defensive engineering audit on the WilAccount ERP SaaS platform. All 39 ERP modules, administrative routes, authentication barriers, and banking flows were subjected to empirical intrusion batteries both on global production (https://wilaccount.com) and local core.
Brute-force lockout within 15 minutes, native RFC 6238 TOTP 2FA, and strict session isolation.
Computerized Audit Trail (PAI) ensuring chronological immutability and HMAC-SHA256 digital seals.
4-stage government budget execution, sovereign appropriation controls, and harmonized TOFE statements.
Defense-in-depth implemented across edge proxy, application runtime, database, and fiscal ledgers.
Pre-computation request inspection at the Next.js Edge Proxy blocking SQLi, XSS, and Path Traversal before hitting the React runtime or database.
Time-based one-time password multi-factor authentication (RFC 6238) with SHA-256 backup codes and 45s real-time heartbeat session tracking.
Transactional and ephemeral PostgreSQL Row-Level Security with set_config and anti-tampering guards against tenant cookie injection (Anti-BOLA/IDOR).
Computerized Audit Trail (PAI) per SYSCOHADA AUDCIF Art. 19 with HMAC-SHA256 signatures and 4-phase public expenditure execution under WAEMU Dir. 06/2009.