The Requirement.
Coller Capital understood the importance of independent security assessments but knew it is almost impossible to ‘mark your own homework’. Naturally, this makes it extremely difficult to find vulnerabilities in your own systems. As such, Coller Capital knew it needed the support of an external team.
The SOlution.
Our experts conducted a professional web app penetration test in the same way that an attacker would attempt to break into Coller Capital’s systems. However, our team performed the test in a sandbox environment to ensure the business was unharmed and remained fully operational.
This ethical hacking engagement was designed to assess the architecture, design and configuration of Coller Capital’s web applications.
We followed a five-step process to ensure no stone was left unturned. This included:
✅ Passive and active information gathering
✅ System scanning and enumeration
✅ Gaining access to systems and exploiting vulnerabilities
✅ Expanding reach and maintaining access
✅ System clean up and reporting
Our Offensive Security Team carried out this work by applying known, realistic attack tactics, techniques and procedures (TTPs), used in real-world sophisticated attacks and compromises, to all external-facing digital assets.
These TTPs were used to identify cyber security risks that could lead to unauthorised access and/or data exposure. We then provided a thorough report highlighting any vulnerabilities and attack vectors identified, with actionable recommendations to remediate any issues.
Want to know more about how The Microsoft Cloud & Cyber Security Specialists can help to transform your organisation? Get in touch today.
