Offensive Security Penetration Testing

Client: UK Retail Payments Operator

The Work

As part of an internal audit for the go-live readiness of a new transactional data analysis platform, we were required to perform internal and external vulnerability scanning and penetration testing of the new system.

How We Helped

The highly sensitive nature of the transactions being stored on the platform, and the importance of the analysis provided to the financial markets, was such that the client required absolute certainty that the implementation was architected and implemented as securely as possible. Our skilled penetration tester deployed a range of techniques and tools to simulate likely hacking attack vectors and test the effectiveness of system security at the transport, infrastructure, database, application and presentation layers and then provide practical mitigation steps for issues identified.

Value Added

Our penetration tester’s practical knowledge of hacking approaches and techniques enabled a level of scrutiny beyond that from purely deploying automated tools. We were able to advise the client, through a risk based approach, to mitigate the vulnerabilities, to the extent that they were comfortable to put the system live.