Thick client applications may have various forms of architectures based on the backend interaction, data storage, and processing. The cognizance of these structures would assist in the evaluation of performance and behaviour of security, particularly in thick client pentesting scenarios.