Application Security Engineer
Ilya works on application and API security at BackDoor — turning scan findings into prioritized, developer-ready fixes and compliance-mapped evidence for SOC 2, ISO 27001, and PCI DSS.
8 articles by Ilya Smyslov
What Is API Penetration Testing? A Complete Guide
API penetration testing finds and proves exploitable flaws in your APIs — BOLA, broken auth, data exposure. Methodology, OWASP API Top 10, and tools.
What Is White Box Penetration Testing? A Complete Guide
White box penetration testing gives testers full access to source code, architecture, and credentials for deep coverage — plus white vs black vs grey box.
What Is Mobile Application Penetration Testing? A Complete Guide
Mobile application penetration testing finds and proves exploitable flaws in Android & iOS apps. Learn the methodology, OWASP MASVS, tools, vulnerabilities, and cost.
Vulnerability Assessment and Penetration Testing (VAPT): The Difference That Matters
Vulnerability assessment vs penetration testing — what VAPT really means, when you need each, and how auditors expect them to fit together.
PCI DSS Penetration Testing: What Requirement 11.4 Actually Demands
What PCI DSS v4.0 requires for penetration testing (Req 11.4): scope, segmentation checks, retest evidence, and how to pass your QSA the first time.
Penetration Testing as a Service (PTaaS): What It Is and When It Fits
What PTaaS is, how it differs from a one-off pentest, what it costs, and when a subscription model actually makes sense — and when it doesn’t.
How Much Does a Penetration Test Cost? A Buyer’s Breakdown
What drives penetration testing cost, real 2026 price ranges by scope, hidden fees to watch for, and how to get an apples-to-apples quote.
Penetration Testing Services: How to Buy One Without Getting Burned
How to choose a penetration testing service — scope, evidence quality, retesting, and the questions that separate real testing from a scan-and-PDF.