• SOC 2 Readiness
  • 24/7 Security Monitoring
  • Canadian-Based SOC

Healthcare software · External penetration test

Independent confirmation that last year's fixes held.

AbleSoft builds practice software used with patient records. It wanted independent confirmation of its current external position.
Book a consultationAll case studies
Three cloud platforms wrapped in policy rings feeding one posture dashboard
Client
AbleSoft
Stage
Delivered
Sector
Healthcare software
Scope
Internet-facing application services, plus an inventory of the wider domain estate
Method
Black-box external penetration test with carry-forward checks from a prior assessment
Delivery
Delivered through a channel partner

The situation

AbleSoft builds practice software used with patient records. An earlier assessment had raised cloud exposure concerns.

The company wanted independent confirmation of what was fixed and what remained.

What GuardsArm did

  • Tested AbleSoft's internet-facing application services from an outsider's position, over three days in September 2026
  • Inventoried the wider domain estate without active testing
  • Re-checked the items carried forward from the earlier assessment
  • Closed with a debrief for technical and non-technical staff

What we found

  • Six findings: two medium, one low and three informational. None critical or high.
  • No evidence of compromise.
  • The previously reported cloud storage exposure was confirmed closed.

Findings are confidential. Counts and themes are published, never hosts, addresses or finding detail.

The outcome

AbleSoft received a short, ranked list of hardening actions and began remediation.

Deliverables

  • Technical report
  • Executive summary
  • Remediation tracker
  • Debrief session

More from the record

DeliveredHealthcare

Health Information Act compliance scoping assessment

Two clinics, one clear picture of their privacy and security position.

Two clinics under shared ownership had privacy documentation on file, and no independent check of whether day-to-day systems matched it.

Silverado Medical Clinic and Vanguard Medical Clinic

Read the case study
DeliveredSoftware

External penetration test and verification retest

No critical or high findings, and a retest that checked every fix.

J-SAS wanted an independent test of its internet-facing systems and proof that issues raised in a prior-year assessment had been dealt with.

J-SAS Inc.

Read the case study
PartnershipChannel partnership

White-label penetration testing

How a reseller sells penetration testing without hiring a testing team.

A security reseller offers penetration testing to its customers, and GuardsArm does the testing under its own brand or the partner’s.

Canadian security reseller

Read the story

Want the same standard of work?

Tell us what you need tested, monitored or evidenced. We will come back with a scope you can act on.
Book a consultationRequest a demo
Book Now