Successful completion of a Hybrid one-time penetration testing exercise
This badge was issued to
Welab Technologies Inc
In September 2026, Welab Technologies Inc (“WeLab”) engaged Stingrai to perform Vulnerability Assessment and Penetration Testing (VAPT) services on its Web / API and Mobile Applications, including the Patient PWA, Health Professional (HP) PWA, Admin Portal, Partner Portal, Patient Mobile Application, and Technician/Health Professional Mobile Application across iOS and Android. The Stingrai team conducted testing from 24 September 2026 to 06 October 2026, using a mix of black-box and grey-box approaches.
Scope
Black-box and grey-box hybrid penetration testing of Web Applications, APIs, and Mobile Applications, covering the Patient PWA, Health Professional (HP) PWA, Admin Portal, Partner Portal, Patient Mobile Application, and Technician/Health Professional Mobile Application across iOS and Android platforms.
Earning criteria
No Critical Level Vulnerabilities
No critical vulnerabilities were identified during the assessment.
No Active or Exploitable Threats
At the time of final validation, the assessed systems demonstrated no active or readily exploitable security threats that would pose immediate risk to the organization.
No Exposure of Customer or Sensitive Data
No customer data, PII, credentials, or other sensitive information was exposed or disclosed during the assessment. Testing was conducted within the agreed scope and handled in accordance with the engagement requirements.
Methodology
Penetration Testing Execution Standard (PTES)
An innovative methodology developed by global security professionals, providing a structured approach to penetration testing from initial engagement through reporting.
OWASP Web Security Testing Guide (WSTG)
A comprehensive guide for testing web applications and services, covering the full spectrum of security testing categories from information gathering through business logic testing.
OWASP Threat Modelling Process
A structured guide to identifying, prioritizing, and addressing security risks through systematic threat analysis aligned with the assessed application's architecture.
Validity
