We wrote a program called "Paros" for people who need to evaluate the security of their web applications. It is free of charge and completely written in Java. Through Paros's proxy nature, all HTTP and HTTPS data between server and client, including cookies and form fields, can be intercepted and modified.

We hope you can benefit from our work and products.

If you want to support our project or obtain formal support from us, please check out the product MileSCAN ParosPro, which is further developed by our core team member and supported by us as well.

We are a group of IT security professionals. We have years of experience in security design and risk assessement of web application, especially for those of financial institutions. The aim of this website is to:

1. Provide a standardized methodology for doing web application security assessment
2. Provide guidelines to web developers for secure web application design
3. Express our view on issues about web application security