Vulnerability Assessment & Penetration Testing for a Fleet management Application
About the client
Client is a provider of Pan India Fleet Management Systems & Solutions
Challenges
Web based Solution intended for Pan India implementation for regulation of Fleet.
Cloud solution capable of hosting multiple fleet and each connected to multiple vehicles
Application going LIVE for selected fleet provider.
The Solution
- Solution Deployed in AWS Cloud with APIs extended for partner cloud as well
- Multiple Roles and Access in application
- Static Testing of code
- Threat modeling and Vulnerability Risk Assessment
- Vulnerability Scan and Penetration Testing using BurpSuite, OWASP ZAP
Services we offered
VAPT of Fleet management Application
Benefits
- Exposed High and Medium Vulnerabilities
- Customized Payload taken for Penetration
- Coverage to OSASP top 10
- Thorough coverage to internal and exposed APIs
- Recommendation for future product development
Key Outcome
50
reduction in UAT deployment time
