A financial services firm that prepares commercial and multifamily real estate loan documents found suspicious activity on its website and needed external security testing for its web application, plus a clear remediation plan. Synoptek ran vulnerability assessment testing using OWASP ZAP and delivered a penetration testing report, finding no high-severity issues but several medium and low findings such as missing X-Frame-Options, a format string error, server details disclosure, and cookies missing the HttpOnly flag. Synoptek provided corrective and preventive actions for each finding, then re-scanned after fixes, helping the client reduce risk, strengthen security posture, and lessen the impact of future incidents.

Join for free to read