- SOC 2 Readiness
- 24/7 Security Monitoring
- Canadian-Based SOC
Software · External penetration test and verification retest · Ontario
No critical or high findings, and a retest that checked every fix.
J-SAS wanted an independent test of its internet-facing systems and proof that issues raised in a prior-year assessment had been dealt with.
- Client
- J-SAS Inc.
- Stage
- Delivered
- Sector
- Software
- Scope
- Internet-facing systems, including production, pre-production and web properties
- Method
- Black-box external penetration test with a verification retest
- Delivery
- Delivered through a channel partner
The situation
J-SAS had a prior-year test from another provider. It wanted an independent view of its internet-facing systems, with evidence that its earlier fixes had held.
What GuardsArm did
- Ran a black-box external penetration test across the public footprint, with a documented coverage matrix
- Reviewed encryption on each host and reviewed email authentication
- Kept an evidence ledger with file hashes for every finding
- Retested each item after J-SAS completed its fixes
What we found
- 16 findings, none critical or high.
- The main exposure from the prior-year assessment was confirmed closed.
- Encryption and email authentication were strong.
Findings are confidential. Counts and themes are published, never hosts, addresses or finding detail.
The outcome
The retest verified the completed fixes, identified two that were only partly effective, and caught one new issue introduced during remediation.
Without the retest, a partial fix and a regression would both have gone unnoticed. The team could close them properly.
Deliverables
- Technical report
- Executive summary for leadership
- Remediation tracker
- Verification report
More from the record
Want the same standard of work?
Tell us what you need tested, monitored or evidenced. We will come back with a scope you can act on.
24/7 SOC Monitoring Available