Client background
The client helps businesses protect themselves from online threats with a wide range of brand protection services. In particular, they utilized cutting-edge technologies such as machine learning to safeguard against piracy, brand abuse, etc.
Published client profile: Location: Europe. Industry: Insurtech. Partnership period: February 2017 - present.
Business challenge
The client’s automated software applications analyze vast amounts of data to identify counterfeit products, unauthorized use of images, and other infringements online. They aimed to make these applications faster and more accurate while ensuring they could efficiently handle increasing amounts of data. Furthermore, the company needed to ensure that there were no security vulnerabilities in these applications that could be exploited to hinder their performance.
Implementation
The delivery team performed a comprehensive security assessment of the client’s applications, analyzing their external interfaces and business logic implementation and focusing on security flaws, vulnerabilities, and misconfigurations. The delivery team provided actionable recommendations based on our analysis that helped the client strengthen their security posture. The specialists conducted penetration testing using the OWASP Web Security Testing Guide checklist to ensure comprehensive coverage of all web security aspects.
In addition, the delivery team helped the client migrate their applications from Java to Python to ensure more efficient data scraping and processing. The delivery team also developed several new applications to cover more marketplaces and emulated human-like behavior to make their detection more difficult.
Finally, the engineers helped improve the efficiency of the client’s applications by utilizing several Python optimization techniques. This ensured they could process large amounts of data with minimal resource usage.
Value delivered
The client partnered with the delivery team to perform comprehensive security assessments and optimizations of their automated brand infringement analysis applications. As a result, the client gained several substantial advantages:
Acquired a comprehensive security report of their applications with identified vulnerabilities and actionable recommendations on how to mitigate them;
Enhanced the speed and accuracy of their applications, allowing them to identify and remove counterfeit products and unauthorized content in real time;
Improved the ability of their applications to cover a wider range of online platforms, such as marketplaces, social media, websites, etc.
Expertise delivered: Cybersecurity services, Penetration testing, Application security testing Technologies: Python, Regular expressions, Docker, Playwright, MongoDB, AWS S3, Bamboo, OWASP Testing Guide, OWASP Top 10 10+ years on the market 300+ employees 1,000+ clients worldwide Comprehensive analysis of business logic implementation OWASP Web Security Testing Guide used during penetration testing Java to Python migration of applications
