Case Studies

Customer

A software company providing ad hoc solutions for ultimate web surfing experience free of the excessive use of third-party applications. The Customer’s powerful assets help to socialize and manage media content both online and offline.

Challenge

With understanding and compassion for the frustrations of end-users navigating among numerous media apps and services, the Customer conceived an all-in-one web browsing application specifically suitable for music connoisseurs, video lovers and people with an active online presence. Our task was to create a Mac version of the browser and to implement a system of updates for Windows and Mac. Other challenges faced by Our team included an auto-updates subsystem which is user-friendly and highly customizable as well as a solution for torrents managing from the browser.

Solution

The team working on the Project originally consisted of six seasoned developers and the total work log has already amounted to 220 weeks. Over this time the adaptation of the Chromium-based browser for Mac has been successfully accomplished and a custom Mac installer has been created.

To keep the browser on the cutting edge of technological trends a system of updates and an auto-updates subsystem for Windows and Mac have been implemented.

One of the unique features of the Product is its ability to support and manage torrent downloads directly from the browser, with lightning speeds and the intuitive interface making for delightful user experience.

Another distinguishing feature of the browser is the single access point integration with all the major social networks and content sharing platforms. The Customer´s designated music service has been integrated in the Product via add-ons, web and desktop apps.

Our Team has also created a special Launcher for Windows which allows the browser users instantly access their favorite bookmarks, page view history and the pages they frequent directly from their desktops in a single click.

Results

As a result the Product has seen several releases with all the required features being implemented and after 2 years the team of five specialists continues to improve the user experience and the Product performance by regularly delivering updates and new features. Now the browser is successfully competing among the market leaders with more than 10 mln monthly active users.

Technologies and Tools

To provide for high up-to-date UX, performance, and security standards, the Chromium browser’s framework has been extensively customized and extended with C++ libraries such as libtorrent-rasterbar library, cryptographic tools such as Crypto++ and OpenSSL, and HTML / JavaScript for internal pages. Windows Service and Mac Daemon were developed for the auto-update subsystem of the Product.

To ensure sustainability and flexibly demands of the Customer’s growing and changing needs the project is being developed on the Time & Materials model and Agile methodology.

Customer

The Customer is a conglomerate with multi-million revenue that runs 15+ diverse businesses and deals with over 200 world-famous brands. The company operates in such areas as engineering, logistics & inventory, automotive industry financial consulting (for banks, investment companies, etc.), retail, food & beverage, advertising and more.

Challenge

The Customer’s businesses had independent IT infrastructures. Thus, operational data was isolated across multiple CRMs, ERPs, POSs and ecommerce solutions, supply chain management systems and other enterprise systems. As a result of disintegrated data, the Customer encountered a number of inconveniences:

• Manual data transferring led to errors and hindered data reliability. Moreover, the data wasn’t available immediately as manual inputs were bound to employee schedule.
• The employees couldn’t quickly get a complete picture of all customer interactions with the business.
• There was no ability to implement an advanced conglomerate-wide loyalty program.
• Automatized reporting embracing all business directions was impossible.

Solution

Assessing the existing needs and problems

Our consulting team started with a thorough examination of the Customer’s applications. During several Q&A sessions with the senior management of each business, our consultants identified existing business processes, information flows, technical details of communication protocols, data formats in use and the required data refresh rates.

Having assessed the revealed problems in the examined processes, Our IT consultants suggested integrating the applications and systems in use to make the Customer’s IT infrastructure better serve the current business needs.

The integration solution had to unite dozens of enterprise software components from 6 industries of different natures. Among them were several CRMs, several ERPs, web and mobile ecommerce solutions, multiple point-of-sale systems (POSs), supply chain management systems, several databases, reporting and analytics tools and more.

The integration architecture pattern had to connect applications placed both on-premises and in the cloud, and support different data formats (text, media, etc.). It was required to handle sync and async messaging, batch processing and support RFC (Remote Function Call) communication, while ensuring the IT infrastructure’s high performance and preserving its flexibility.

Developing application integration architecture

The team of Our IT consultants offered to implement a layered architecture. The suggested architecture pattern included 4 layers, each fulfilling its specific role and functions:

• Points of initial data entry (included CRMs, ERPs and other enterprises systems of different purposes).
• The integration layer (mediator) – responsible for data extraction, transformation into the needed format, enhancement, and routing. It was decided to extract data directly from source applications since data processing in the data warehouses adversely affected the data veracity and the process velocity.
• Single and consistent data storage (with thought-out data access and encryption) – responsible for storage and processing of operational and analytical data.
• The Business Intelligence (BI) layer – responsible for data analytics, reporting and visualization.

The layered architecture was chosen as it enabled:

• Isolate future changes within one layer.
• Allow functionality re-use (from the lower layers).
• Eliminate security concerns.
• Make the conglomerate-wide IT system more understandable, simplify its testing and maintenance.

The proposed integration was based on ESB (enterprise service bus) and/or ETL (extract, transform, and load) services to allow for two strategies of smooth data exchange. ESB should be responsible for quick and relatively lightweight operations (messaging) between a data source and another data source or the underlying layer. ESB handled message routing, message exchange monitoring, message storage and message format validation.

ETL (extract, transform, and load) tool should be mostly responsible for loading massive amounts of data. ETL dealt with the transformation of structured and unstructured data into usable forms, data cleaning (by applying advanced validating rules), master data management and loading transformed data into the data warehouse.

Evaluating and comparing technology options

As a part of the IT consulting service, we described, assessed and compared four different tech stacks. The options arose from the Customer’s partnerships with IT providers and tech prevalence in the existing IT infrastructure. They included:

• Option 1 – integration based on the SAP tech stack and SAP Process Integration (ESB).
• Option 2 – integration based on the Microsoft tech stack and Confluent for Kafka / Azure Service Bus (ESB-centered).
• Option 3 – integration based on the Microsoft tech stack and Talend Data Fabric (ETL-centered).
• Option 4 – integration based on the Microsoft tech stack, Talend Data Fabric as ETL and Talend ESB.

In view of the Customer’s cloud migration strategy and plans to introduce IoT and social media streaming, the options included either cloud-ready solutions (Option 1 and 4) or those requiring minimal efforts for migration to the cloud (Option 2 and 3). ScienceSoft consultants highlighted the recommended architecture option for each way.

Reporting

Our IT consultants prepared comprehensive descriptions and assessments of each proposed integration scenario. They included the integration design and integration guidelines, data extracting & loading, data processing operations, data quality & master management, data storage structure. They also provided detailed recommendations on the overall infrastructure design, rated the strengths and weaknesses of each tech stack, listed available connection types. All the needed tools were compared against key parameters and expected costs of ownership.

In addition, we described the potential risks related to the layered architecture and came up with the mitigation plan for each of them.

As the integrated enterprise applications had to deal with sensitive personal and business data, our IT consultants also described data security strategies for each proposed integration pattern in the report.

Results

The Customer obtained four comprehensively described and assessed integration scenarios and tech stacks for the quick and effective consolidation of the conglomerate’s data. All four action plans allowed for having clean, accurate and consistent data, timely available and moved safely across different systems.

To support the company’s growth and scalability, the suggested integration option allowed for the smooth introduction of new components at minimal extra cost.

Methodologies

Q&A sessions, functional decomposition, business requirements analysis, comparative analysis.

Customer

The Customer is a UN-based group of companies present in the variety of industries including luxury retail, hospitality, and eCommerce. An utmost experience and a tailor-made approach to clients are the cornerstones of the Customer’s business philosophy.

Challenge

The Customer approached Our for a comprehensive solution encompassing efficient customer and operations management.

The Customer used to rely solely on the professionalism and communicative skills of their team to maintain excellent customer service at each company separately. However, they matured to enter the next level of a highly personalized approach to clients within their whole ecosystem. This called for a unified client base that gives access to all-embracing client information. As companies managed by the Customer exist separately, the main challenge has been to centralize real-time data flows.

As a part of a targeted top-of-the-line client service, the Customer needed a loyalty program to award clients by purchase volume and frequency.

Along with improving the quality of client communication, the Customer sought to automate some daily activities. For example, they needed a smart solution for case management to avoid the risk of overlooking client issues due to human error.

Also, the Customer needed a handy tool for efficient operations management to gain greater visibility into daily operations.

Solution

To meet all the business needs, Our Team proposed Microsoft Dynamics CRM implementation. The project team focused on two key tasks – to customize the platform in line with all the Customer’s requirements and solve the challenge of centralizing data from multiple sources.

Striving to make the customer service personalized for clients, convenient for the staff, and transparent for managers, we came up with the following functionality:

• A comprehensive CRM profile houses available client information delivered by enterprise systems (like contact details, wish lists, orders) and entered by the Customer’s team members (like client’s character traits, behavioral characteristics, personal style).
• Automated case management is achieved by creating customer service teams in the CRM and adding assignment and escalation rules for case flows.
• We created experience surveys sent to clients automatically after their interaction with companies. To let the Customer get direct feedback on their service while remaining non-intrusive for clients, We provided for a convenient way of conducting surveys by email and the possibility for the staff to turn off surveys in a CRM profile.
• A two-step loyalty program was implemented to maintain an appropriate level of exclusivity for luxury retail. The CRM system automatically assigns scoring levels based on the predefined criteria, then sales teams check the levels in clients’ profiles and reward them accordingly.
• Referrals serve as an internal communication channel for the Customer’s businesses. When needed, they inform one another about clients’ needs and interests, book services and ensure that clients are welcomed as long-awaited guests.

Operations management benefits from CRM implementation due to the following functionality:

• A set of calendars (business facility, personal, working hours and business).
• Goal setting and management functionality.
• Personal dashboards for sales activity monitoring.
• Facility management for storing comprehensive information about the infrastructure.

To enable data centralization from multiple sources into one CRM system, we offered to implement a data warehouse (DWH). There, the data gets integrated, cleaned, and unified to be further transferred to the CRM.

There are two scenarios of how different data types get to the DWH:

• The data from a customer profile (full name, gender, contact details, etc.) arrives immediately in the DWH. Some third-party systems deliver the data using the push method. With others, the DWH pulls the data at a predefined schedule.
• Meanwhile, there are separate staging databases for electronic systems of each company that collect raw transactional data on an hourly basis. After the data gets unified and deduplicated in staging databases, it is exported to the DWH.

Our Team has also created OLAP cubes to provide the Customer with advanced analytics capabilities. Once a day, the data gets exported from the DWH for further analysis. The Customer gets it visualized in dashboards, pre-defined and ad-hoc reports.

Results

With the CRM, the Customer brings their companies under one umbrella. Having their client data centralized and daily processes automated, the Customer upgrades client service within their whole business to a new quality level – team members serve repeat clients and cross-sell more effectively while the risk of human negligence regarding client service is minimized. The Customer builds trust with clients and contributes to their loyalty with bonuses. Business managers get real-time analytics concerning customer management activities and are always up-to-date with current cases, goals, and scheduled activities of their team.

Technologies and Tools

Microsoft Dynamics CRM, MS SQL Server including Microsoft SQL Analysis Services and Microsoft SQL Server Reporting Services

Customer

The Customer is engaged in an online sale of printed and electronic books. The company develops two business lines, so it runs two separate ecommerce websites: the first one targets the widest audience of readers and is publicly available, while the second one sells academic books required by colleges and universities and is intended for students only. The access to the academic e-store is available upon selection of the educational institution and registration.

Challenge

The Customer had both ecommerce websites built on Magento 1. As the end of the platform support was approaching, they were looking for a Magento-competent development team to migrate them to Magento 2. Hosting their ecommerce presence on AWS, the company also questioned whether its cost and scalability was optimal for them and considered hosting migration.

The Customer saw migration as an opportunity to introduce some website optimization. As they were looking to increase sales in the publicly available e-store, they decided to refresh its digital user experience and visual design. Also, they wanted to integrate their academic e-store with the Amazon marketplace and offer students a backup plan to buy there in case a required book was out-of-stock in their store. To facilitate the management of the e-stores, the Customer wanted to unite them into a single website.

Solution

Code and theme migration to Magento 2

Chosen as a Magento migration vendor, We started the project with the code audit and revealed 12 custom-built interdependent modules of poor code quality. The audit allowed for accurate assessment of the work and time scope needed for trouble-free migration. Due to the difference in the software architecture style and code implementation between Magento 1 and 2, lift-and-shift migration of custom modules could end up with functionality breaks and serious performance issues (e.g., up to 50-second page load). To avoid such risks, our team performed code refactoring and then re-coded all custom modules to be compliant with Magento 2.

Tasked to add a contemporary look to the web stores, We opted for a ready-made Magento 2 theme and customized it to reflect the Customer’s brand.

Hosting migration to MageMojo

The Customer hosted their Magento websites on AWS and employed Amazon SQS (Simple Queue Service) and SNS (Simple Notification Service) services. Amazon SQS was used to render books requested by professors and add them to the rosters of different courses and academic levels. Amazon SNS allowed for the simultaneous processing of professors’ requests. We analyzed the Customer’s hosting needs and offered to migrate the websites to MageMojo. Created specifically for Magento-powered websites, it made for a more budget-friendly choice. As a part of the infrastructure (Amazon SNS and SQS, email services) and resources (images) were required to leave on AWS, Our team custom-coded integration between Magento and AWS and enabled fast data exchange.

Magento integration with the Amazon marketplace

Our developers enabled students visiting the Customer’s academic e-store to buy e-books on Amazon without leaving the website. In this scenario, a user journey unfolded as follows: after logging in, students saw a full roster of the required literature. The books in-stock were available for adding to the shopping cart. The books out-of-stock were shown as available for purchase on Amazon. However, the web store didn’t redirect users to Amazon but generated one more shopping cart and processed the purchase and payment transaction within the website.

Multistore and multisite setup

Upon the migration, Our developers formed the websites into a Magento multistore for the Customer to conveniently manage both web stores from the same admin panel.

Given that the Customer worked with multiple publishers, our team enabled a multisite Magento instance. Each publisher had a separate store view where readers could find the full book collection and brand information. At the time of release, there were 100+ publishers’ websites created.

Results

Both e-stores have been migrated to Magento 2 and merged into a multistore successfully with all their custom functionality saved and the websites’ performance not disturbed. The Customer witnesses sales growth as digital user experience has been generally improved and students have gained an opportunity to see and buy books beyond the academic program.

The Customer plans to continue the collaboration with us to migrate their ecommerce presence to a PWA.

Technologies and Tools

Magento Open Source 2.3.3, PHP 7.3, Elasticsearch 6.5.4, MySQL 5.7, Nginx 1.9, Varnish 6.2, Amazon SQS, Amazon SNS

Customer

The Customer is a Norwegian company with offices in Oslo, San Francisco and Bogota. Established in 1998, the company delivers award-winning Web Content Management solutions based on a flexible and easy-to-use Java product compliant with web standards. The Customer’s client base includes large multinational companies such as Toyota, Posten, Statistics Norway, Gjensidige and Jøtul.

Challenge

The Customer realized that their product – a content management system (CMS) written in Java – needed a technological revamp to overtake other market players in the forthcoming years. They wanted to offer users a top-notch digital experience, especially in the light of the booming user interface (UI) technologies like JavaScript and Ajax. So, the Customer chose US as a vendor with a cross-domain experience in web app development to create a totally new product that would allow the company to boost its market visibility worldwide and especially in the USA.

Cooperation

The success of the project was preceded by a persistent hands-on struggle for the right technological solution to ensure a safe and predictable foundation for online presence of any kind.

Upon passing a set of strict tests, 5 Java Developers were enrolled on the project to augment the Customer’s development team. Although they were mostly to develop the application’s front-end, their ability to easily switch to the back-end if needed was of a particular advantage.

The project kicked off with Vaadin – an open source web application framework. Owing to its server-side architecture, it would enable both development teams to focus on their strong suit – Java programming. However, it came out soon that the framework was not flexible enough to create a CMS as dynamic and smooth as it was anticipated.

The Customer decided to try the Ext JS framework. In 1 year, the application’s code-base grew so big that further development and maintenance were next to impossible.

Trying to find the right solution, Our Team and the Norwegian company came up with an idea to develop their own object-oriented framework and apply it with Microsoft’s TypeScript to replace Ext JS entirely. With the unique framework, the Customer managed to protect their API from any unpredictable change as well as enable users to employ the same components that the CMS was developed with. The approach automatically allowed a continuous and efficient testing of the product.

With the team ramped up with a test automation specialist, the development process continued for another 2 years under agile methodologies. The CMS evolved into an easy-to-use and scalable platform that brings in a lot of features to improve user experience significantly:

• Responsive admin UI: it is a single dynamic page that allows users to manage one or dozens of websites simultaneously. No reloading is needed to navigate between documents and applications easily
• Real-time updates: thanks to WebSockets, users can always stay updated on any content modifications made by other users
• Live editing: now it is possible to build and edit layout templates without using HTML code. The tool provides unlimited design options with drag-and-drop components
• Flexible permissioning: all users, be it individuals or groups, can enjoy a simple and secure access to the content

“We have been trying to make user experience as smooth as possible,” says The Team Lead Java Developer Engineer Glory “This application is a single access point which helps manage unlimited number of websites, so you can avoid hiring administrators and thus reduce maintenance costs considerably. Besides, no programming is required to publish new content.”

Results

In cooperation with The team of 6 specialists, the Customer has released a brand-new CMS called  eXperience Platform to provide the most intuitive and fastest way to create and manage websites, intranets, commerce and mobile solutions for public and private enterprises.

For Morten Øien Eriksen, CEO and co-founder, eXperience Platform has been the biggest undertaking in the history of the company. “The costs are estimated at NOK 50 million. Our goal is to be innovative in all areas of the application and not to follow the path of our competitors. And now we have a platform with a modern and flexible architecture which is years ahead of our competition”, he says.

Throughout 5 years, Our cooperation with the Client has grown into a strategic and friendly relationship. “Working collectively  has enabled us to deliver the project faster and with better quality. Their developers are highly skilled and passionate about the project,” says Morten.

Technologies and Tools

Languages: Java, JavaScript, TypeScript, HTML, CSS

Frameworks & libraries: Vaadin, Ext JS, Gradle, Elasticsearch, Less

Customer

The Customer is a US multi-business enterprise operating in a range of industries, such as fashion retail, hospitality, and restaurant.

Challenge

The Customer had an IT infrastructure consisting of more than 50 servers with a range of integrated systems: an ecommerce website, CRM, a data warehouse, and others.

The number of the Customer’s clients was rapidly increasing together with their needs, so the Customer needed to frequently update their applications to keep their clients satisfied. To meet these and other business needs, the Customer needed their IT infrastructure properly managed, regularly enhanced without critical operational errors and system failures, and continuously monitored to make sure their web services were highly available.

Solution

To solve the Customer’s infrastructure management tasks, we assigned a team of DevOps practitioners with the expertise in system administration and software development. By combining the development (Dev) and operations (Ops) specialists’ efforts, our team aimed at significantly accelerating the delivery of new software features, fixes, and updates in alignment with the Customer’s business objectives.

The Customer’s IT infrastructure included three key elements integrated with each other: an eCommerce website, CRM, and data warehouse. To ensure the faultless performance of the integrated systems, Our Team set up and managed the tools for load balancing, infrastructure monitoring and log management. To manage the Customer’s eCommerce website, Our DevOps practitioners implemented the continuous integration and continuous delivery (CI/CD) pipeline.

CI/CD pipeline implementation

Using Stash as a source code repository and Jenkins as a CI/CD automation tool, DevOps engineers designed a CI/CD pipeline to accelerate the processes of developing, testing and releasing the updates and bug fixes for the Customer’s web applications based on Pimcore, Magento, Akeneo, etc. Our team applied Docker to containerize the Customer’s web applications and used the Distributed Cloud Operating System (DC/OS) based on the Apache Mesos distributed systems kernel to manage the containers. With the use of Ansible, Our team managed applications configurations.

With CI/CD pipeline implementation, Our DevOps practitioners aligned the development, test and stage environments with the production environment to eliminate the differences between them, and automated performance testing of web applications.

Load balancing and HTTP caching

For proper load balancing, network traffic distribution and HTTP caching across the Customer’s IT infrastructure, Our DevOps engineers used the following tools:

• Nginx – as a web server processing users’ requests.
• Traefik – as a load balancer responding to users’ requests and directing them to the right resource.
• HAProxy – as a load balancer distributing the requests across the Customer’s multiple servers while ensuring their high availability.
• Varnish – as an HTTP reverse proxy cache accelerating web servers’ response to the users’ requests of the Customer’s clients.

IT infrastructure monitoring and log management

To monitor disk usage, RAM and CPU consumption, DevOps engineers set up and applied Zabbix. Our team used Blackbox Exporter to monitor web services availability. To collect the data on web services availability from Blackbox Exporter and send alert notifications on the web services issues, Our DevOps engineers used Prometheus. For constant container performance monitoring, Our DevOps engineers applied Container Advisor.

For convenient web application log management, Our team applied the ELK stack: Logstash (L) parsed web application logs, sent them to Elasticsearch (E) where the logs were collected and filtered, and Kibana (K) worked as a visualization tool allowing for using the data stored in Elasticsearch to build charts and graphs with analytics results.

Results

With the DevOps practices that we introduced and applied, the Customer got the proper management of their IT infrastructure and benefited from the high availability of the IT infrastructure. As a result of Our DevOps engineers’ work, the Customer got the possibility to enhance the ecommerce solution frequently without disruptions to the business process.

Technologies and Tools

Source code repository: Stash.

Continuous deployment: Jenkins.

Configuration management: Ansible.

Containerization and container management: Docker, Distributed Cloud Operating System (DC/OS), Apache Mesos.

Load balancers and HTTP caches: Nginx, HAProxy, Traefik, Supervisor, Varnish.

Server monitoring: Zabbix, Prometheus, Blackbox Exporter, Container Advisor.

Log management: Elasticsearch, Logstash, Kibana (ELK).

Customer

The Customer is a large Asian retail bank with around 550 branches, providing comprehensive banking services to more than 2.5 million clients.

Challenge

The Customer needed to test the security controls deployed within their IT infrastructure. For this reason, they were looking for a qualified security testing provider knowledgeable in the banking industry to conduct:

• Vulnerability assessment and penetration testing of the network’s external perimeter.
• Vulnerability assessment and penetration testing of the network’s internal environment (servers, firewalls, etc.).
• Security risk assessment of the client digital channels (internet banking, mobile banking, mPOS merchant service, QR code payments, clients’ payments, and communication in social networks).
• Simulation of social engineering attacks at the employees’ emails to check their susceptibility to phishing.

Solution

The team of certified cybersecurity specialists carried out the following scope of security testing services:

• Vulnerability assessment and penetration testing of 60 external IP addresses.
• Internal network vulnerability assessment and penetration testing.
• Security risk assessment of the client digital channels (internet banking, mobile banking, mPOS merchant service, QR code payments, clients’ payments, and communication in social networks).
• Simulation of social engineering attacks.

Vulnerability assessment and penetration testing of the network’s external perimeter

Our team conducted black box penetration testing of the external perimeter of the Customer’s network. The ethical hackers didn’t manage to penetrate the network with no credentials, so they proceeded with the grey box testing method using user login details but having no access to the entire network. Grey box penetration testing revealed a vulnerability of the Customer’s remote server to external manipulations. We recommended the Customer address the vendor of server software to fix the issue.

Among other recommendations was eliminating the leakage of internal IP addresses from the DNS server to web pages visible to the Customer’s clients.

Vulnerability assessment and penetration testing of the internal network

Our security engineers scanned the Customer’s internal network for vulnerabilities and exploited the discovered vulnerabilities using the grey box penetration testing method. They discovered a server using the obsolete HTTPS protocol, which was critical for the banking environment storing clients’ data.

Moreover, our experts executed a remote command on the Customer’s firewall configured by a third-party vendor and could read the files of all network groups. Such a vulnerability could allow potential intruders to obtain user privileges and take over the Customer’s server. Our recommendations on remediation of the internal network issues included:

• Updating the HTTPS protocol.
• Updating or changing firewall software.

Security risk assessment of the client digital channels

Our team analyzed potential security risks of the following client digital channels: internet banking, mobile banking, mPOS merchant service, QR code payments, clients’ payments, and communication in social networks. The team revealed several risks in the payment and communication service used by the Customer’s clients:

• Initiating malicious operations (e.g., fund transfers) with clients’ contacts.
• Initiating malicious communications with the clients’ contacts (including contacts in social networks).

Our recommended treatment actions included:

• Adding functionality to authenticate users of the payment and communication service to prevent malicious communications.
• Adding functionality to confirm payments and other fund transfers.

Social engineering simulation

Our security specialists simulated phishing attacks at the bank employees’ emails. The ethical hackers managed to convince 65% of targeted employees to send personal data via email, which could potentially allow intruders to take over user credentials.

We recommended that the Customer hold social engineering and email phishing training sessions for employees and share knowledge about current cybersecurity threats.

Results

The Customer received detailed reports of the conducted network vulnerability assessment, penetration testing, and the security risk assessment of the client digital channels with recommendations to mitigate the discovered vulnerabilities. After fixing all the issues according to the provided remediation plan, the Customer ran retesting, which showed the increased security level of the network’s external perimeter and internal environment.

As the next step, the Customer plans to commission The team to perform cyber-compromise assessment to detect the potential threat actors and red teaming services to test the detection and response capabilities to real hacker attacks.

Technologies and Tools

Nmap, Nessus, Burp Suite, Gophish, Metasploit, Netcat, DIRB, Nikto, SSLScan, Firefox Developer Tools