Introduction

Our European banking customer, with over 10,000 employees, wanted to thoroughly test the security robustness of its customer-facing website. The bank in question wanted to understand how secure the website was, where any frailties were located and how to mitigate the issues found. This would help the bank to remain compliant with industry regulations, but more importantly, ensure they are fully aware of potential security gaps and how to fill them.

The Challenge

Case studies give potential customers a real-life example that they can identify with. Choose a customer with a great story: maybe someone who increased profits or reduced churn thanks to your company. Conduct an interview with that customer to hear what they have to say. 

The Solution

Safetech’s team of Crest accredited offensive security specialists conducted several tests that are representative of an attacker’s approach to finding vulnerabilities. Our team tracked their findings and then provided the client with a probability and clear risk factor score. This gave our team and the client a clear understanding of the vulnerabilities and, more importantly, how we could rectify them.

After completing all of the tests our client received a detailed report which included all details of the completed tests; outcomes, results and. The report included a list of all vulnerabilities found, details of the severity and scale of each vulnerability, how they have been exploited and, crucially, advice on how to remediate the vulnerability. The report was structured to allow it to be easily digested by the board as well as clear and actionable for the security team.

Methodology

Our expert engineering team allocated 1 senior cybersecurity engineer (7 years’ experience), 1 mid-level engineer (4 years’ experience) and 1 junior engineer (over 1 years’ experience).   

It was agreed with the client that we would execute this service using a Grey Box approach. The team used a number of industry-standard testing methodologies including OWASP, NIST, OSSTM and SANS.

Services provided for our customer