References

We cooperate with leading companies and institutions in the field of IT security.

What they say about us

Workshop od TunaSec mi ukázal realně, co to znamená etický hacking. Přešli jsme si nástroje, které jsou k tomu využívány a to i s praktickými příklady. Také mi ukázal mnoho stránek a jiných zdrojů, kde se můžu o problematice více naučit a i případně trénovat na příkladech.

Absolvent workshopu Martin, Česko

Case Study: Penetration Test

Among our clients is Liferay, which provides CRM solutions for large banks and companies such as Bosch or VMWare.

Subject of testing

Our work on the Penetration Test project for Liferay DXP software consisted of analyzing security vulnerabilities found in the application. This application is released to customers as part of their Liferay DXP version updates after penetration tests.

Scope of penetration test and results

The scope of work was set with the customer at more than 100 hours per year, during which we continuously test software for security vulnerabilities since 2020. The result is the regular delivery of reports detailing the vulnerabilities found and recommendations on how to fix these problems.

Other Selected References

In addition to penetration tests and audits, we have also implemented simulated phishing campaigns for a number of clients aimed at verifying and increasing employee awareness.

Deepnote

We performed penetration tests for their collaborative data science notebook platform to ensure the security of user data and infrastructure.

Sportega

We conducted a security audit of the e-commerce platform of one of the largest sports equipment retailers, focusing on the protection of customer data.

PAP

We provided penetration testing of information systems for this major Slovak company.

Apify

We tested the security of the cloud platform for web scraping and automation, including API and client interfaces.

Printify

We implemented comprehensive penetration tests for a global print-on-demand platform to uncover potential vulnerabilities.

ENGETO

We have been cooperating on education in the field of cybersecurity for a long time, we led Ethical Hacking academies and we perform security audits of their educational platform.

Vulnerabilities Successfully Reported

As part of penetration tests, we have already reported more than 200 vulnerabilities to our clients. We have uncovered and reported countless other errors as part of Bug Bounty programs around the world.