Vulnerability Assessment & Penetration Testing for a Fleet management Application

B grade B · published by Crestech

Crestech published this case study on 3 Sep 2021 about an anonymised client described as "a provider of Pan India Fleet Management Systems & Solutions". It names fleet and telematics and reports 1 quantified outcome.

1 TitleVulnerability Assessment & Penetration Testing for a Fleet management Application ev-0334
2 Clientanonymised by vendor: "a provider of Pan India Fleet Management Systems & Solutions" ev-0336
3 Systemsfleet and telematicsev-0337
4 Testing typessecurity (vulnerability assessment and penetration testing)static code testingthreat modelling
5 ScopeVulnerability assessment and penetration testing of a cloud-hosted, web-based fleet management application with multiple roles and partner APIs, before go-live with a selected fleet provider: static code testing, threat modelling, vulnerability risk assessment, vulnerability scanning and penetration testing. Engagement length is not stated.
6 Team and stackBurpSuite, OWASP ZAP; application hosted on AWS; team size not statedev-0343
7 Outcomes
  • 50 (unit not shown) reduction in UAT deployment time: 50 reduction in UAT deployment timeev-0339
8 Date published2021-09-03 (page metadata)ev-0344
9 Source URLhttps://www.crestechsoftware.com/case-studies/vapt-of-fleet-management-application/
10 Scope notes
  • Exposed High and Medium Vulnerabilities as publishedev-0340
  • Thorough coverage to internal and exposed APIs as publishedev-0341
  • Recommendation for future product development as publishedev-0342

What the case study does not state

  • The client's name
  • How long the engagement lasted

Outcomes are quoted as published by the vendor and are not verified by this site.

Related case studies

Scores are computed from vendors' published case studies and third-party reviews by the methodology on this site, frozen on the date shown. Case study outcomes are quoted as published by the vendor and are not verified results. Absence of evidence is not evidence of absence. This site does not accept payment from vendors.

Suggest a case study or correction