Stingrai ran a hybrid penetration test of new features and API endpoints in a web application for TPH, a Canadian printing and custom manufacturing company. Human penetration testers worked alongside Snipe, Stingrai's autonomous agent, and TPH's team worked with Stingrai through a shared Slack channel and the PTaaS platform.
TPH hired Stingrai Inc. to accomplish the following goals:
Stingrai's penetration testers worked alongside Snipe on the new section of the application and its API endpoints, using API documentation and staging credentials supplied by TPH. Findings were shared on the PTaaS platform and in a dedicated Slack channel, and fixes were retested as the development team pushed them.
TPH's team ran the engagement from one place: requests, findings and retests on the PTaaS platform, with questions answered in a shared Slack channel.
“Simplifies the pentesting process by giving us one place to request, manage, and track security testing. We spent WAY less time coordinating and more time improving security.”
Speed, small + simple comm channel (slack), efficient
Didn't cover our authentication method at first but pushed it as a feature in days!
