The work behind the trust.
See how we run the different cybersecurity exercises for clients across a range of sectors.
Protected by reCAPTCHA. The Google Privacy Policy and Terms of Service apply.
Got it, talk soon.
Your message is in. We reply within one business day.
Could not send. Please try again or email us.
Our projects
A selection of cybersecurity projects delivered for clients across different industries and regions.
An exposed migrations directory and the administrator token inside it
A directory sweep found a /database/migrations/ folder reachable from the internet. Inside it, an initsql.sql with a plain-text administrator token. The token did not belong to the audited application but to another entity in the same group, and it was still valid.
An administrator token in the URL, archived by a crawler and still valid
An unauthenticated user ended up with administrator access. The application carried the security token inside the URL, tokens never expired, and one of those addresses had already been archived by a public crawler.
See how we’d approach your environment.
Half an hour on a call with the person who would run the test. We look at your stack and tell you where it is worth starting.
Get a demo