Since applications contain bugs; there exists a possibility that an attacker might be able to exploit some of them to impact or gain access to your information assets and capabilities. Web applications in particular are more be affected by these vulnerabilities, as they are frequently developed and deployed quickly in production in short durations without sufficient time spent in security testing. We have a rigorous methodology for reviewing web application code. Our review process is specifically tailored to find vulnerabilities that commonly occur in applications. We use a combination of both automated and manual techniques to conduct a source code review. Through the use of tools such as Check`marx and Fortify, we are able to pick up vulnerabilities across large code-bases, and then narrow our focus onto security-specific modules of code (such as those implementing encryption or authorization) and also check for business logic issues.