Analisis Dan Perbaikan Keamanan Sistem Informasi Pencatatan Hasil Panen Sawit Menggunakan Metode Penetration Testing

Web application security has become a critical issue in the agribusiness sector due to the increasing digitalization of harvest recording systems, including the Palm Oil Harvest Recording Information System (SawitGoDigi) in Bengkalis District, which had never undergone a comprehensive security assessment and faced risks of data leakage, unauthorized access, and service disruption. This study analyzes and improves system security using a penetration testing approach based on OWASP Top 10, combining grey-box testing for identification and white-box testing for remediation, covering vulnerability identification, remediation, and retesting. Risk evaluation used the OWASP Risk Rating Methodology with a likelihood-impact scale of 1–9. Four vulnerabilities were identified: SQL Injection (score 9, High), Broken Authentication including OTP weaknesses and brute force login (score 9, High), Weak Session Management (score 9, High), and Security Misconfiguration in HTTP security headers (score 2, Low). After remediation, all vulnerabilities were closed and could not be exploited under the same scenarios. This study contributes an integrated security testing model combining identification, remediation, and verification within a single cycle.