Development and quality assurance methodology for ensuring security and privacy developed over 7 years and corresponding to industry best practices.

Leveraging Microsoft Threat Modeling Methodology

Following Privacy Best Practices: Privacy Guidelines for Developing Software Products and Services

Following Security Guidelines for Development of Web Applications - Improving Web Application Security: Threats and Countermeasuers

Using specialized security tools, including Microsoft Anti-Cross Site Scripting Library

Multi-level regular testing for all prevalent and dangerous security vulnerabilities: XSS, SQL-injection, un-authenticated/unauthorized access.

Microsoft Gold Partner certification

Using enterprise-strength platform - Microsoft.Net framework (IIS 6.0, ASP.Net 2.0, Web Services, SQL Server 2005)

Hosting Club-Webs sites with a top-tier hosting provider – MaximumASP, who ensures:

• Network Security
• Intrusion Prevention Systems
• Enterprise Firewalls
• Private Firewalls
• Anti-Virus Protection

Deployment and maintenance protocols include:

• Secure configuration of Web server and Database server
• SSL (encrypted) connection between the web server and database server
• Up-to-date configuration and patches for the operating system and software components
• Authorization procedures for personnel involved in maintenance and deployment
• Ongoing activity monitoring to identify security attacks and prevent vulnerabilities
• Constant monitoring of industry developments regarding new attack vectors and vulnerabilities and development approaches to build secure systems