HelloWallet

Company:	HelloWallet
Application Name:	HelloWallet.com
Assessment Technique(s):	Static Binary Analysis, Manual Application Penetration Testing
Assurance Level:	AL3 (Medium) Applications connected to the internet that process financial or private customer information
Issue Date:	03/02/2010
Application Description:	HelloWallet is a self-service website that helps users identify their financial goals while providing real-time comparisons of available checking, savings, and loan products. View Details

In its reviewed state, the HelloWallet application met or exceeded the security score outlined in the Veracode Risk Adjusted Verification Methodology for an application at the assurance level specified above. Veracode’s risk adjusted verification methodology is based on respected industry standards including MITRE’s Common Weakness Enumeration (CWE) for classification of software weaknesses and FIRST’s Common Vulnerability Scoring System (CVSS) for severity and ease of exploitability and NIST's definitions of assurance levels.

While every precaution has been taken in the preparation of this document, Veracode, Inc. assumes no responsibility for errors, omissions, or for damages resulting from the use of the information herein. Due to the nature of software security testing, the lack of discoverable flaws does not mean the software is 100% secure.