What we found. What our clients did next.

Security problems are easier to understand when they are concrete. These stories describe issues uncovered during real client engagements and the actions that followed.

Client identities and identifying details are withheld to protect confidentiality. Where a specific outcome could not be substantiated from the source material, we do not claim it.

SeguriScan

01/ 09 All cases ↑

Forgotten servers with factory passwords

B2B software company · Attack surface discovery

Result

Previously overlooked internet-facing systems were identified, giving the IT team a clear list of risks and unnecessary infrastructure to address.

The challenge

As a software company grew, its online infrastructure expanded faster than its inventory. A new IT lead needed to know which systems an outsider could reach, including services left behind by earlier projects.

What we did

SeguriScan mapped the company's internet-facing assets and checked them for security weaknesses. Analysts reviewed significant findings and organized them into actionable priorities.

What we found

The exposed systems included old servers, applications and databases that were no longer in active use. Some test environments still held real data. Other findings included administrative interfaces using default credentials, weaknesses in authentication and operating systems no longer receiving security updates.

What changed

The IT team gained visibility into systems missing from its records and a prioritized plan for addressing the most serious exposures. Unneeded systems were shut down, reducing infrastructure costs. The company also began using its security findings and remediation work to support conversations with prospective customers.

See what your company exposes online

Check My CompanyNothing to install · No access to your internal network · You approve active testing separatelyAll cases ↑

02/ 09 All cases ↑

A work password exposed through an outside service

Retail company · Credential exposure monitoring

Result

A corporate login appeared in a third-party data breach, revealing a risk that password policies alone could not prevent.

The challenge

A retailer enforced strong password requirements. But an employee had used a work email address and password to register with an external service. When that service was breached, the credentials appeared in leaked data.

What we did

SeguriScan identified the corporate email address and associated password in a known leak and reported the exposure to the client. The finding highlighted a possible route for attackers to attempt unauthorized access if the credentials were reused elsewhere.

What we found

The exposure did not originate in the retailer's own infrastructure. It came from a service outside the company's control. The incident demonstrated why strong internal password rules do not eliminate the risks created by third-party breaches.

What changed

The company used the finding to strengthen its guidance on using corporate accounts with external services and to reinforce employee awareness. The response focused on account practices and procedures rather than purchasing additional hardware.

Find exposed company credentials

Check My CompanyNothing to install · No access to your internal network · You approve active testing separatelyAll cases ↑

03/ 09 All cases ↑

A router that answered anyone's questions

Financial services company · External configuration review

Result

A pilot uncovered an externally accessible management service on a VPN router despite the company's existing security controls.

The challenge

The company already used modern security tools. It wanted to find out whether an independent view of its internet-facing infrastructure could reveal anything those controls had missed.

What we did

During a SeguriScan pilot, the team examined exposed network services and identified a VPN router responding to requests over SNMP, a network-management protocol. Its configuration allowed information to be retrieved without the expected access restrictions.

What we found

The exposed service disclosed information about the router and VPN users, including usernames and device details. Such information can help an attacker understand a target environment and prepare more focused attacks.

What changed

The company restricted access to the management service and checked other network equipment for similar configurations. The pilot showed how an external assessment can complement existing defenses by identifying overlooked exposure.

Find what existing tools may miss

Check My CompanyNothing to install · No access to your internal network · You approve active testing separatelyAll cases ↑

04/ 09 All cases ↑

A growing business, a moving target

Multi-site business · Asset discovery and prioritization

Result

A growing organization gained a consolidated view of its internet-facing systems, including assets absent from its existing inventory.

The challenge

As the business expanded, new domains, websites and services appeared across its operations. Keeping a reliable inventory became difficult, and the IT team lacked a consistent external view of what needed attention.

What we did

SeguriScan discovered internet-facing assets from externally observable information and examined their security posture. Analysts reviewed significant findings and helped organize the results by priority.

What we found

The assessment identified systems missing from the company's records and configuration issues requiring follow-up. Each finding gave the team a clearer basis for deciding what to investigate and address.

What changed

The organization gained a more useful inventory of its exposed assets. Its technical teams could use the findings as a work list and focus first on the issues with the greatest potential impact.

Discover assets you may be missing

Check My CompanyNothing to install · No access to your internal network · You approve active testing separatelyAll cases ↑

05/ 09 All cases ↑

Security does not stop after the annual check

Wholesale distributor · Regular external monitoring

Result

Regular assessments gave the IT team a way to track emerging issues between periodic security reviews.

The challenge

A one-time assessment describes infrastructure at a particular moment. Software changes, new vulnerabilities are disclosed and internet-facing services evolve. The distributor needed a way to identify relevant changes without waiting for its next annual review.

What we did

SeguriScan checked the company's internet-facing systems on a regular schedule. The work included identifying exposed services, outdated software and other externally observable risks. Significant findings were reviewed and presented with remediation guidance.

What we found

The assessments identified known vulnerabilities affecting internet-facing software, along with other issues requiring attention. The reports connected findings to affected systems and recommended next steps.

What changed

The IT team received structured reports that could be passed into its remediation workflow. Rather than relying solely on periodic assessments, the organization had a regular source of information about changes to its external security posture.

Keep track of changes to your exposure

Check My CompanyNothing to install · No access to your internal network · You approve active testing separatelyAll cases ↑

Expert Services

06/ 09 All cases ↑

Security answers that helped enterprise sales move forward

Software startup · Security assessment and advisory

Result

A small software company received a prioritized security improvement plan and material it could use in conversations with enterprise customers.

The challenge

Enterprise prospects were asking the startup to demonstrate how it protected its systems and customer data. With a small team and no dedicated security specialist, the company needed to identify gaps and respond credibly to security questions.

What we did

The security engagement assessed the company's security practices and technical environment. Findings were translated into immediate improvements and longer-term actions, with attention to the requirements raised by prospective customers.

What we found

The assessment identified areas where security controls and processes needed strengthening. The available project summary does not substantiate a more detailed public list of technical findings.

What changed

The company strengthened its security arrangements and gained a clearer understanding of which customer requirements it could address and which needed further work. It could present its assessment and improvement plan as evidence of a structured approach to security.

Need to answer a customer's security questions?

Talk to an Expert All cases ↑

07/ 09 All cases ↑

A security plan without hiring a security chief

Distribution business · Security audit and advisory

Result

Management received a prioritized security plan that its existing IT team could act on, along with a basis for budgeting.

The challenge

A distribution company operated without a dedicated head of information security. Its IT team handled day-to-day systems, but management needed a clearer picture of the risks, the most important improvements and the resources required.

What we did

An expert security audit examined the company's environment and practices. The findings were organized into practical actions, taking account of the team's capacity and the likely business consequences of different risks.

What we found

The audit highlighted improvements needed in areas including network segmentation, access controls and encryption. These findings came from a broader security audit; they are not presented as discoveries made by external attack-surface monitoring.

What changed

The organization assigned responsibility for security work, began addressing priorities using its existing team and obtained management approval for an annual security budget. It gained a more structured plan without immediately adding a senior security position.

Turn security findings into a practical plan

Talk to an Expert All cases ↑

08/ 09 All cases ↑

A text-message feature that could have run up the bill

Consumer brand · Web application penetration testing

Result

A penetration test uncovered an SMS feature that could be abused to generate charges for the business. The engineering team implemented a fix within approximately a week.

The challenge

A consumer-facing company regularly introduced new features to its digital services. An SMS confirmation workflow created a potential financial exposure if someone could trigger paid messages without effective restrictions.

What we did

IntruForce specialists performed a remotely conducted, agreed-scope penetration test of the web application, using partial knowledge of the system to assess how its functionality could be misused.

What we found

The SMS workflow could be induced to send messages to premium-rate numbers without effective limits. An attacker could potentially exploit this behavior to create charges for the company, even without compromising a server or stealing customer data.

What changed

The team documented the issue, its potential financial consequences and the steps required to address it. The client's engineers implemented the remediation within approximately a week, and the company introduced security checks for new functionality.

Test your application before attackers do

Talk to an Expert All cases ↑

09/ 09 All cases ↑

What a realistic phishing email revealed

Financial organization · Phishing simulation

Result

An authorized simulation exposed weaknesses in how suspicious messages were recognized, reported and handled.

The challenge

The organization wanted to understand how employees would respond to a plausible phishing attempt, beyond what technical email defenses could tell it.

What we did

IntruForce conducted an agreed remote phishing exercise. The message imitated an internal IT-support notice about a workplace tool and directed recipients to a simulated login flow. The sender address closely resembled a legitimate one.

What we found

Two recipients in a small test group followed the link, and one entered a work login. Another replied to the supposed support sender for assistance, suggesting a need to make the reporting process clearer. The recipient list also contained mailboxes associated with former employees.

What changed

The exercise produced concrete recommendations: reinforce phishing-awareness training, establish a clear route for reporting suspicious messages, review inactive accounts and strengthen appropriate technical protections, including email authentication and multifactor authentication.

See how your team responds to phishing

Talk to an Expert All cases ↑

Your first step

Request an initial review of your company.

Share your company website and a work email. We'll send your request to the IntruForce team. Tell us if you want to discuss a specific assessment instead.

Nothing to install
No access to your internal network
You approve active testing separately