B2B SaaS · client anonymised
Baseline Infrastructure & Application VAPT for a cloud-native SaaS
Client profile
- Early-growth, cloud-native B2B SaaS platform
- First formal security assessment
- Driven by enterprise sales and investor diligence
Engagement scope
- L1 VAPT — cloud infrastructure, web app, public APIs
- 2-week sprint engagement
- Consolidated report + closure validation round
Notable themes
Exposed cloud storage misconfiguration, outdated TLS configuration, verbose error handling.
Business outcome
Closure report issued within days of fix submission. Findings satisfied the client's enterprise-deal security questionnaire and were cited in its investor data room.
Find your broken locks before someone else does.
Tell us what you need tested. We reply within one business day.