Mühltal, March 2025 – The application security of the NOVA AVA cloud service has once again been officially tested. The result: On the five-level scale for the security of web applications, NOVA AVA achieved NOVA AVA received the best possible rating of “very high” – certified by secuvera GmbH, a BSI-certified testing center for IT security.
No vulnerabilities were identified at application level during the tool-based and manual penetration tests. NOVA AVA was therefore once again certified as having a very high level of security. The standards for penetration tests of the German Federal Office for Information Security and the OWASP Web Security Testing Guide (WSTG) were applied.
Data protection and data security are sensitive and decisive criteria for trust in cloud-based software solutions. “Security is a must for us,” says Felix Grau, Managing Director of NOVA Building IT GmbH. “The certificate once again officially confirms that NOVA AVA meets security standards that apply to large industrial companies, for example. These customers also demand this. Of course, the topic is relevant for all planners. After all, data security is part of every planning and construction contract.”
NOVA Building IT GmbH guarantees very high security standards on several levels:
- User data is stored exclusively in German data centers that are ISO27001-certified and subject to the German Data Protection Act.
- Data transmission is encrypted using the secure https protocol.
- The software running on the servers, i.e. the cloud service itself, is protected with the OWASP
certificate and regularly checked for security.
Here you can find this press release as pdf-document.