The work
External · Cloud · Web app
Entire subscriber table open on the public internet, closed and re-verified mid-engagement
A consumer-facing SaaS product that collects personal profile data from the people who sign up for it. Small production estate: a single-page web application on a managed hosting platform, backed by a hosted cloud database and a transactional email service.
24 findings validated
Internal · Assumed-breach · Network
One workstation foothold reaches cloud administrator, the hypervisor cluster and live internal data
The internal corporate network of a mid-sized technology company: an engineer workstation, a physical LAN of roughly two dozen hosts, a virtualization cluster, and a connected cloud tenant.
27 findings validated
External · Cloud · Multi-tenant
Anonymous self-registration mints a global-administrator token across a shared platform
An IT services firm that runs its client operations as one tenant on a shared, multi-tenant cloud platform it does not own. The same platform is used by many other firms.
21 findings validated
External · Web app · Authenticated
The lowest-privilege account reads the whole internal admin surface
A business-operations SaaS application serving several business clients from one deployment, with a built-in AI assistant.
10 findings validated
External · Cloud · Identity · Network
A well-defended core, serious exposures in the estate around it
A philanthropic organization's internet-facing estate: a public website behind a cloud edge service, a staging environment, a federated single-sign-on identity layer, and perimeter network appliances.
4 findings validated