Does it support Response Manipulation, Strip Signature and XSW attacks?

[redapplewithleaves]

Hello,

I've set up Sustainsys on my ASP.NET MVC application. My IT Security team tested the application and it failed a few essential security concerns.

Does Sustainsys support these features out of the box or did I misconfigure something?

1. Response Manipulation - Response was manually manipulated by changing the value of an email and authentication was not validated
2. Strip Signature - Signature was removed from the response and authentication was not validated
3. XSW attacks - SQL injection attacks were passed and authentication was established.

I need to know where to start with these whether it is my configuration settings, IDP settings, or do I have to handle these manually and has nothing to do with Sustainsys?