Add cloud application security assessment documentation

README.md

@@ -1,4 +1,4 @@
-# Inbox Notifier – [![Version](https://img.shields.io/github/release/xavierfoucrier/inbox-notifier)](https://github.com/xavierfoucrier/inbox-notifier/releases/latest) [![Code quality](https://img.shields.io/codacy/grade/088c98657120438ca3f8ffb529abcb79)](https://app.codacy.com/gh/xavierfoucrier/inbox-notifier/dashboard) [![ci](https://img.shields.io/github/actions/workflow/status/xavierfoucrier/inbox-notifier/ci.yml?branch=main)](https://github.com/xavierfoucrier/inbox-notifier/actions?query=workflow:"CI") [![Downloads](https://img.shields.io/github/downloads/xavierfoucrier/inbox-notifier/total "Downloads - All releases")](https://github.com/xavierfoucrier/inbox-notifier/releases) [![Softpedia](https://img.shields.io/badge/softpedia-award-%230E7FC0 "Softpedia - Award")](https://www.softpedia.com/get/Internet/E-mail/Mail-Utilities/xavierfoucrier-Inbox-Notifier.shtml#status)
+# Inbox Notifier – [![Version](https://img.shields.io/github/release/xavierfoucrier/inbox-notifier)](https://github.com/xavierfoucrier/inbox-notifier/releases/latest) [![Code quality](https://img.shields.io/codacy/grade/088c98657120438ca3f8ffb529abcb79)](https://app.codacy.com/gh/xavierfoucrier/inbox-notifier/dashboard) [![Downloads](https://img.shields.io/github/downloads/xavierfoucrier/inbox-notifier/total "Downloads - All releases")](https://github.com/xavierfoucrier/inbox-notifier/releases) [![Softpedia](https://img.shields.io/badge/softpedia-award-%230E7FC0 "Softpedia - Award")](https://www.softpedia.com/get/Internet/E-mail/Mail-Utilities/xavierfoucrier-Inbox-Notifier.shtml#status) [![ADA](https://img.shields.io/badge/casa%20-%20assessment%20-%20%23019688 "App Defense Alliance - Cloud Application Security Assessment")](https://github.com/xavierfoucrier/inbox-notifier?tab=readme-ov-file#assessment)
 Gmail notifications instantly in the Windows taskbar.
 
 [![Inbox Notifier](logo.png "Inbox Notifier")](logo.png?raw=true)
@@ -68,6 +68,31 @@ Softpedia guarantees that Inbox Notifier is **100% Free**, which means it does n
 Read the [Softpedia Labs review](https://www.softpedia.com/get/Internet/E-mail/Mail-Utilities/xavierfoucrier-Inbox-Notifier.shtml) for more informations.
 
 
+## Assessment
+On **June 8th, 2024**, Inbox Notifier has satisfied CASA application security requirements by successfully completed a **Cloud Application Security Assessment (CASA)**. In meeting these assessment requirements, Inbox Notifier is verified to meet the CASA Tier 2 requirements. The assessment was conducted by **PwC, an independent third party lab**, authorized by the App Defence Alliance to conduct CASA security assessments.
+
+| Category                                                        | Status |
+| --------------------------------------------------------------- | ------ |
+| Architecture, Design and Threat Modeling Requirements           |   ✅   |
+| Authentication Verification Requirements                        |   ✅   |
+| Session Management Verification Requirements                    |   ✅   |
+| Access Control Verification Requirements                        |   ✅   |
+| Validation, Sanitization and Encoding Verification Requirements |   ✅   |
+| Stored Cryptography Verification Requirements                   |   ✅   |
+| Error Handling and Logging Verification Requirements            |   ✅   |
+| Data Protection Verification Requirements                       |   ✅   |
+| Communications Verification Requirements                        |   ✅   |
+| Malicious Code Verification Requirements                        |   ✅   |
+| Business Logic Verification Requirements                        |   ✅   |
+| File and Resources Verification Requirements                    |   ✅   |
+| API and Web Service Verification Requirements                   |   ✅   |
+| Configuration Verification Requirements                         |   ✅   |
+
+CASA is based on the industry-recognized **Open Web Application Security Project (OWASP)** Application Security Verification Standard (ASVS) to provide third-party (3P) application developers with a basis for testing technical application security controls, a consistent set of requirements for secure application development, a homogenized coverage and assurance levels for providing security verification using industry-aligned frameworks and open security standards.
+
+> App Defense Alliance CASA tier 2 **assessment will be renewed on an annual basis**.
+
+
 ## Contribute
 If you want to report a bug or if you just want to request for a new feature/improvement, please **read the project [contributors guidelines](https://github.com/xavierfoucrier/inbox-notifier/blob/main/.github/CONTRIBUTING.md) before**. Thanks for taking time to contribute to Inbox Notifier.