Pengembangan dan Evaluasi Keamanan Website Company Profile berbasis Flask

Abstract

Penelitian ini bertujuan untuk mengembangkan website company profile berbasis Flask pada PT Ahsani Mitra Solusindo menggunakan metode SDLC model prototype throw-away. Sistem dikembangkan menggunakan Flask, MySQL, Firebase Authentication, dan Tailwind CSS. Kemudian dievaluasi keamanannya berdasarkan Vulnerability Assessment dengan menggunakan OWASP ZAP, SQLMap, Dalfox, dan SHCHECK untuk mendeteksi kerentanan seperti SQL Injection, Cross-Site Scripting (XSS), serta kelemahan security header. Hasil pengujian menunjukkan adanya beberapa celah keamanan yang kemudian diperbaiki melalui validasi input, parameterized query, dan penguatan konfigurasi sistem. Setelah dilakukan perbaikan dan pengujian ulang, tingkat kerentanan website berhasil menurun sehingga sistem menjadi lebih aman, responsif, dan tetap fungsional dalam pengelolaan informasi perusahaan

This research aims to develop a Flask-based company profile website for PT Ahsani Mitra Solusindo using the throw-away prototype model of the SDLC. The system was developed using Flask, MySQL, Firebase Authentication, and Tailwind CSS. The website’s security was then evaluated through a vulnerability assessment using OWASP ZAP, SQLMap, Dalfox, and SHCHECK to detect vulnerabilities such as SQL injection, cross-site scripting (XSS), and security header weaknesses. The test results revealed several security gaps, which were subsequently rectified through input validation, parameterised queries, and strengthened system configurations. Following these improvements and retesting, the website’s vulnerability level was successfully reduced, making the system more secure, responsive, and fully functional in managing the company’s information.