Get a quote

Case Study - Mobile Software Testing

We cater to a wide variety of customers typically for their network assessment, website pen-testing needs. Besides these we cover multiple offerings in the cyber security domain, for almost all industry sectors. Below are few categorized based on industry sectors which you can refer to.

Book a Free Consultation

Case Study -Mobile Software Security Assessment

Task Title

Mobile based software product security testing

Industry Vertical

Software development IT firm catering to irrigation and power generation sector

Industry Vertical

Firm manufactures mobile based software
Products are meant for irrigation and water management sector as well as power generation plants

Location

Pune (India)

Time to solution

1.5 Months
mobile-app-rtu-scada-process-ot-security

Business situation

The software development firm is based at Pune, India and primarily creates mobile based software. The software is used by firms providing water and irrigation services, as well power generation units. Purpose of software is multifold, to record attendance, to record temperature and other scientific parameters at remote locations. They approached Valency Networks for the purpose of performing mobile application security testing as well as the server software which connected to all mobile devices.

Solution

  • Valency Networks started work via a kickoff meeting with stakeholders and studied server software architecture as well as its operations using mobile devices.
  • A list of possible security attack vectors was created. Separate testing list of mobile software was created. Mobile software vectors were simulated on a windows machine.
  • Intrusive tests were performed on server as well as on the mobile device end to capture logs. Logs were processed to find out additional hacking points.
  • A separate Android operating system module was created to measure mobile logs and was corelated with the server logs.
  • Subsequent serious tests were performed to simulate all mobile scenarios typically found at irigiation plant as well as power generation plants.
  • Technical solution engineering was performed and provided as a consultancy service to the customer.
  • Additional round of re-testing was performed to ensure all the vulnerabilities were fixed.
  • Finally a detailed audit and test report with problems found and their solutions suggested was presented in front of the customer’s management. IT architecture changes were suggested in the report too, with action dates and plans.

Benefits

  • Customer’s products were enhanced due to the value addition of IT security.
  • Customer could acquire multiple orders by emphasizing the cyber security enablement of their products and services.
  • Customer was imparted with cyber security knowledge and could use it in their next version of the same product, as well as upcoming mobile products.

More Case Study

Content Sniffing

IT software developemt
Read More

Content Sniffing

SCADA based automation
Read More

Content Sniffing

Manufacturing company
Read More

What Our Clients Say

These testimonials are a proof why we are Top Cyber Security Company, and also Best VAPT Consulting Organization.

CN

Performed IEC 62443 security assessment for an industrial control system

OT Security Head

Industrial Automation Company, Stuttgart, Germany

“The Valency Networks team brought good understanding of both cybersecurity and industrial systems. They took time to understand our architecture before starting the assessment and the findings were explained very clearly. The recommendations were practical and helped our engineering team address the security gaps without affecting the ongoing operations.”

CN

Performed VAPT for a SaaS cloud application

Chief Information Security Office (CISO)

SaaS Product Company, Mumbai, India

“The Valency Networks team understood our application quickly and carried out the VAPT in a very structured manner. The findings were practical, clearly explained and easy for our development team to understand. Their approach helped us identify the important issues and focus on fixing the right things first.”

CN

Performed cloud security assessment for an AWS environment

Cloud Security Head

FinTech Platform Company, Dubai, UAE

“The Valency Networks team did a very detailed review of our AWS environment and identified several configuration gaps that we had not noticed internally. The findings were explained in a practical way and our cloud team could understand exactly what needed to be changed. The overall assessment was technically strong and very useful for us.”

CN

Performed web application VAPT for a digital banking platform

IT Head

Banking Technology Company, Singapore, Singapore

“The Valency Networks team was very clear about the scope and understood our application quickly. The testing was detailed but well managed, and the issues were explained to our development team in simple terms. We particularly appreciated the support during remediation, as the team helped us understand the findings and close them properly.”

CN

Performed ISO 27001 gap assessment and implementation support

Compliance Manager

Healthcare Services Company, Toronto, Canada

“Valency Networks helped us bring much more clarity to our ISO 27001 preparation. The team understood our existing processes and pointed out the gaps without making things unnecessarily complicated. Their guidance on documentation and evidence was very practical and helped our team prepare much better for the certification audit.”

CN

Performed API security assessment for a healthcare platform

Product Manager

HealthTech Product Company, London, United Kingdom

“The Valency Networks team was easy to work with and understood our API flow quickly. They tested the application from different angles and identified issues that were not visible during our internal testing. The report was clear and the discussions with our development team were useful in helping us fix the findings properly.”

CN

Performed network security assessment for a manufacturing environment

IT Infrastructure Head

Engineering Manufacturing Company, Pune, India

“The assessment by Valency Networks was handled very professionally from start to finish. The team understood our network and operational requirements before beginning the testing. The findings were technically detailed but still easy for our team to understand, and the recommendations gave us a clear direction for improving our overall network security.”