Security Audit Report
We conducted a comprehensive audit, penetration testing, and ISO 27001 implementation for a SaaS client.
- Security testing
- Audit
Portfolio
Work we have delivered
50 projects across sectors. Client names are withheld under confidentiality agreements.
Cybersecurity
37SaaS company4 weeks Finance3 weeks Penetration Test
We conducted manual red teaming and exploitation of APIs and mobile apps for a finance client.
- Penetration testing
- Security
Enterprise3 weeks Enterprise Infra Scan
Performed large-scale infrastructure vulnerability scanning for an enterprise client using Nessus and Nmap.
- Nessus
- Nmap
Software as a Service4 weeks SaaS App Assessment
Performed SAST and DAST on a SaaS application before release.
- SonarQube
- Burp Suite
E-commerce2 weeks E-commerce Web Scan
Conducted OWASP Top 10 vulnerability testing on an e-commerce platform.
- OWASP ZAP
- Qualys
Finance2 weeks Finance DB Assessment
Evaluated customer database configuration and access controls using custom scripts and Nessus for a financial client.
- Custom Scripts
- Nessus
Healthcare4 weeks Healthcare Multi-layer
Performed comprehensive security assessment across all layers of a medical system using OpenVAS and Metasploit.
- OpenVAS
- Metasploit
Government3 weeks Gov Compliance Scan
Security assessment aligned with national regulations for a government client, using Qualys and Nessus.
- Qualys
- Nessus
Technology Company1 week Tech Post-Remediation
Performed post-patch vulnerability revalidation for a technology client using Burp Suite and Nmap.
- Burp Suite
- Nmap
Enterprise3 weeks External Perimeter Pentest
Simulated external attacks on the enterprise network using Metasploit and Nmap.
- Metasploit
- Nmap
Finance3 weeks Internal Network Pentest
Simulated lateral movement and privilege escalation using BloodHound and Cobalt Strike for a finance client.
- BloodHound
- Cobalt Strike
SaaS3 weeks SaaS Web App Pentest
Conducted deep manual exploitation of the application’s business logic using Burp Suite Pro and custom scripts.
- Burp Suite Pro
- Custom Scripts
E-commerce2 weeks E-commerce API Pentest
Tested API endpoints and authorization mechanisms for an e-commerce client using Postman and Burp Suite.
- Postman
- Burp Suite
Healthcare4 weeks Healthcare Full-scope
Conducted thorough penetration testing of web, API, and network systems for HIPAA compliance using Kali Linux and Metasploit.
- Kali Linux
- Metasploit
Government6 weeks Gov Red Team Exercise
Unannounced stealth attack simulation for a government client using Cobalt Strike and Empire.
- Cobalt Strike
- Empire
Technology1 week Tech Post-Remediation
Re-tested previous exploitation findings for a tech client using Burp Suite and Metasploit.
- Burp Suite
- Metasploit
Enterprise4 weeks AWS Security Assessment
Assessed and implemented AWS Organizations for an enterprise client.
- AWS Security Hub
- Config
SaaS on Azure with Defender3 weeks Azure Hardening
Hardened Azure AD and Storage for customer data using Azure Security Center and Defender.
- Azure Security Center
- Defender
Financial Services Client6 weeks Multi-cloud Alignment
Security policies aligned across AWS and Azure using Terraform and custom scripts for a finance client.
- Terraform
- Custom Scripts
Healthcare4 weeks HIPAA Cloud Automation
Automated cloud compliance checks for healthcare with AWS Config Rules and Lambda.
- AWS Config Rules
- Lambda
E-commerce2 weeks E-commerce Monitoring
Implemented CloudWatch and GuardDuty to deliver real-time security alerting and monitoring for an e-commerce client.
- CloudWatch
- GuardDuty
Tech8 weeks Secure Cloud Migration
Designed a secure cloud architecture from the start of migration, using CloudFormation and Terraform.
- CloudFormation
- Terraform
Enterprise3 weeks Cloud Incident Response
Created cloud incident playbooks and simulations using AWS Detective and Azure Sentinel.
- AWS Detective
- Azure Sentinel
Enterprise3 weeks AD Domain Assessment
Analyzed Active Directory attack paths for an enterprise client using BloodHound and custom scripts.
- BloodHound
- Custom Scripts
Finance4 weeks AD PAM Implementation
Implemented a tiered admin model and Privileged Access Management with Microsoft LAPS and GPO for a financial client.
- Microsoft LAPS
- GPO
Healthcare2 weeks AD SIEM Integration
Integrated Active Directory logs with SIEM using Splunk and Microsoft Defender for Identity for threat detection in a healthcare setting.
- Splunk
- Defender for Identity
Enterprise3 weeks AD Incident Recovery
Investigated and restored a domain compromised by ransomware using forensic and Microsoft tools.
- Forensic Tools
- Microsoft Tools
Technology Company2 weeks Privilege Escalation Fix
Performed strict ACL cleanup and permission delegation using BloodHound and PowerShell.
- BloodHound
- PowerShell
Enterprise3 weeks Lateral Movement Block
Implemented Microsoft LAPS and network segmentation for an enterprise client.
- Microsoft LAPS
- GPO
Government4 weeks CIS AD Compliance
Audited and implemented CIS Benchmarks for Active Directory using Nessus.
- CIS Benchmarks
- Nessus
Finance3 weeks iOS Banking App Test
Security testing and implementation of Keychain for a finance client using Frida and Burp Suite.
- Frida
- Burp Suite
E-commerce company3 weeks Android E-commerce Test
Tested and implemented code obfuscation for an e-commerce client using MobSF and Drozer.
- MobSF
- Drozer
Healthcare4 weeks React Native App Test
Conducted end-to-end testing of a cross-platform healthcare app and its API using Postman and Burp Suite.
- Postman
- Burp Suite
SaaS6 weeks Secure Mobile Dev
Provided secure coding training and integrated mobile SAST with SonarQube and GitLab CI.
- SonarQube
- GitLab CI
Finance3 weeks Payment App Security
Tested business logic and transaction data integrity for a finance client using Frida and custom scripts.
- Frida
- Custom Scripts
Healthcare2 weeks Telemedicine App Test
Tested SSL/TLS pinning implementation using Burp Suite and Wireshark.
- Burp Suite
- Wireshark
E-commerce3 weeks Retail App SDK Audit
Conducted security analysis of external libraries and SDKs for an e-commerce client, using MobSF and Dependency Check.
- MobSF
- Dependency Check
AI Agents & Automation
6Fashion Store4 weeks WhatsApp Chatbot
An automated messaging bot integrated with the store’s inventory and logistics systems.
- WhatsApp API
- NLP
- Python
SaaS Platform3 weeks Website Chatbot
Developed a customer support bot for a B2B SaaS platform using React, Node.js, and NLP.
- React
- Node.js
- NLP
Logistics3 weeks Invoice Automation
A workflow automation system for logistics that uses APIs to retrieve shipping data and generate PDF documents.
- Workflow automation
- API
E-commerce2 weeks Email Automation
Automated email marketing based on user behavior.
- Email API
- Automation
Finance3 weeks Approval Workflow
A workflow engine with integration powers a tiered approval system for corporate expenses.
- Workflow engine
- Integration
E-commerce client6 weeks AI Agent Support
Developed an LLM-based AI agent trained on the e-commerce company’s knowledge base.
- AI/ML
- NLP
- Python
Custom Software
4Restaurant Chain5 weeks Sales Dashboard
Built a custom web dashboard that aggregates data from multiple POS systems for a restaurant chain.
- React
- Node.js
- PostgreSQL
E-commerce4 weeks Analytics Dashboard
Developed a React dashboard that visualizes sales data and marketing metrics for an e-commerce client.
- React
- Analytics
- Data visualization
Retail6 weeks Inventory System
Built a real-time multi-warehouse stock management system for a retail client using React, Node.js, and MongoDB.
- React
- Node.js
- MongoDB
Government Agency7 weeks Project Management App
Internal project management application for a creative agency, built with React, Node.js, and PostgreSQL.
- React
- Node.js
- PostgreSQL
Web3 & Blockchain
3Crypto Client8 weeks DeFi Platform
Developed a Solidity smart contract with a reward algorithm and a React/Web3.js DApp dashboard for a crypto client.
- Solidity
- Web3.js
- React
Digital Art8 weeks NFT Marketplace
Built a digital art marketplace on Polygon with lazy minting, using Solidity, Web3.js, and React.
- Solidity
- Web3.js
- React
Blockchain4 weeks Smart Contract
Developed and audited custom smart contracts using Solidity on Ethereum for a blockchain client.
- Solidity
- Ethereum
Need something similar?
Describe what you need. We will share a realistic scope and timeline openly.