Customer Stories
Real engagements.
Real findings.
Two engagements, two industries, two completely different conversations. What they have in common: the scan ran autonomously, the report arrived within a day, and the findings were specific enough to act on immediately.
Grey Box Test
One scan, one critical fix the team had genuinely missed.
Cloudflare in front. HSTS preloaded. CSRF on the login. Modern stack. The kind of setup founders sleep well over - until a public profile endpoint quietly leaked an admin role flag for eighteen months without anyone noticing.
Industry
Australian consumer subscription platform
Time to first finding
23 minutes
Time to remediate
< 24 hours
Read the full story →
External Penetration Test
Independent verification for an Australian legal practice.
Quarterly external testing in place of triennial manual engagements. ASD Information Security Manual alignment, CVSS-scored findings, and an evidentiary chain accepted by professional indemnity insurers and audit reviewers.
Industry
Australian legal services firm
Time to first finding
90 minutes
Time to remediate
within 2-week re-test window
Read the full story →