Synoptek's vulnerability testing services have enabled various clients, including a security software company and a financial services provider, to identify and rectify security vulnerabilities, improving their overall cybersecurity posture. By conducting thorough assessments and suggesting corrective actions, Synoptek assisted these companies in safeguarding sensitive data and minimizing security risks. Their comprehensive reporting and strategic partnerships have helped clients reduce threat levels and implement effective security measures.

1. © 2021 Synoptek
Business Cases
© 2021 Synoptek

2. Vulnerability Testing Services Enable a
Software Company Identify and Rectify
Security Loopholes in Time
2

3. CASE STUDY
3
A private IT security software company, specializes in
Data and IT Security, IT Compliance, Information
Governance, IT Risk Assessment, Insider Threat
Detection, User Behavior Analysis, Change Auditing,
and Content Services.
Using Synoptek’s Vulnerability Testing Services
and through the implementation of the
preventive actions against the identified
vulnerabilities, the client has been able to
overcome all vulnerabilities, including the one
which the Open Bug Bounty researcher had
disclosed, successfully.
• With vulnerabilities identified and resolved in
time, the client can safeguard itself from
cyber-attacks.
• The client can offer secure access to its
website for its users while protecting their
data at all times.
Since known vulnerabilities have been
identified, the client is also able to strengthen its
security posture and prevent future attacks.
Synoptek partnered with the client to understand their issues and offered the required Vulnerability
Testing Services. Synoptek took the following actions for the Open Bug Bounty issue(s) and
vulnerabilities assessment testing activities:
• Carried out manual exploration of the website and suggested necessary preventive actions.
• Scanned the website with the help of tools such as OWASP ZAP, OWASP Xenotix, Nikto, and
suggested a list of vulnerabilities such as CrossSite Scripting Attack, Anti CSRF tokens, X-Frame
Options, SQL Injection, and so on along with their preventive actions.
• Successfully identified cross-site scripting attack on the client application, furnished details where
vulnerability existed, and provided preventive action to resolve them.
• Regularly submitted reports to the client’s development team so that they could implement the
suggestions during the development cycle.
BENEFITS
SOLUTION
• The client empowers information security and
governance professionals to reclaim control
over sensitive, regulated, and business-
critical data, regardless of where it resides.
• While the client could always successfully
identify and resolve any security loopholes,
Open Bug Bounty Researcher found a
security vulnerability affecting the website
and its users. They identified XSS (Cross-
Site Scripting) and other vulnerabilities and
disclosed information related to XSS
vulnerability on Open Bug Bounty site.
• To get detailed insight into the security gaps
identified, the client was looking to partner
with a security consulting firm that could look
into the gaps and provide a complete
vulnerability report. The client also wanted
the firm to provide a list of
preventive/corrective action items for their
infected website.
BUSINESS NEED

4. Security Testing Services Enable a
Financial Services Company to
Greatly Reduce Threat Level
4

5. CASE STUDY
5
Premier provider of loan documents for commercial and
multifamily real estate loans. Client prepares loan
documents for large national banks, regional banks,
credit unions and private lenders.
Synoptek’s Vulnerability Assessment Services
enabled the client to get insight into the
vulnerabilities, which were then implemented by
the client team.
• Synoptek helped the client mitigate risks
with support from the test and security team.
• With the acceptance of suggestions and
preventive actions against identified
vulnerabilities, the client has been able to
reduce the security risk level for the
production application.
Post testing, the client has been able to
strengthen its security posture, minimize threat
level, and reduce the impact of security
incidents.
Synoptek partnered with the financial services company to identify the vulnerabilities in their website and
carry out required testing. Synoptek performed the following actions items:
• Performed security scan using OWASP ZAP tool on the infected web application and submitted a
Penetration Testing Report.
• Reported no high-level vulnerabilities but a few medium and low-level vulnerabilities existed on the
application:
o X-Frame-Options Header Not Set
o Format String Error
o Server Details Disclosure
o Cookie No HttpOnly Flag
• Suggested corrective/preventive action for each of the vulnerabilities identified.
• Once the client team implemented the suggested preventive action items to their website, Synoptek
performed a security scan again.
BENEFITS
SOLUTION
• The client uses a proprietary document
preparation software and advanced web
interface that helps them deliver loan
documents with amazing speed and
efficiency. Their team of experienced real
estate finance attorneys and document
specialists provide unparalleled support to
customers across 50 states in the US.
• The client realized that their website was
infected with some suspicious activities. They
were looking for a Security Testing Services
partner who could perform external security
testing against their web application.
• The client also wanted the partner to provide
a report with all the vulnerabilities
discovered, and the remediation
solutions/preventive actions for each of them.
BUSINESS NEED

6. Conclusion
6
• Through Vulnerability Assessment Services, a company can identify their security gaps
and strengthen their website and application’s privacy also can safeguard them from
cyber-attacks
• Synoptek has proven to be an excellent partner for companies looking to minimize
security risk levels and has helped them take preventive and protective measures,
Synoptek helps overcome all Vulnerabilities successfully.

7. Synoptek Overview
Consulting,
IT Leadership and
Management
Business Process and
Software Solutions
Business Infrastructure
and System Solutions
Business
Applications
Workforce
Productivity
Product
Development
Cybersecurity
Infrastructure
Performance
Cloud
Advancement
Data Insights
Synoptek is a global systems integrator and
managed IT services provider that can
transform your business for the better. We
partner with organizations worldwide to help
them navigate the ever-changing technology
landscape, build solid foundations for their
business, and meet their business goals.
clients in
1200
countries
28
employees globally
800+
employee certifications
5000
Offices in
12
countries
3
Founded in 2001,
headquartered in
Irvine, CA
Financial
Services HealthCare
Manufacturing &
Distribution
Retail & Online
Software &
Technology
Higher Education
K E Y F A C T S
I N D U S T R I E S
O F F E R I N G S

8. • Security program diagnostics
• Unified endpoint security
• Cyber threat hunting
• SOC as a Service
• Ransomware defense
• Risk Management Framework
• Managed cybersecurity services
• Cloud strategy and planning
• Cloud assessment services
• Cloud transformation and migration
• Cloud management and optimization
• Managed cloud gateway
Synoptek Services Portfolio
• Business applications consulting
• Business technology evaluation
• Application integration
• Business application implementation
• Managed application support
• Business Intelligence consulting
• Data warehouse services
• Big Data engineering
• Data visualization and analytics
• Data science and AI
• Analytics as a Service
• Strategic workforce planning
• user enablement
• Digital workplace services
• Real-Time Communication (RTC)
services
• Product development
• Application modernization
• Application support & maintenance
• Mobility and IoT
• Quality assurance
• UI/UX design and development
• DevOps
• Core IT infrastructure management
• IT cost management
• Managed database applications
• Managed IT services
• Data protection and security
solutions
• Data protection implementation and
management
• Data protection managed services
• Disaster recovery as a service
Technology Strategy and Planning M&A Planning Program and Project Management Service Management Assessment Assessment and Evaluation
Data Insights
Business
Applications
Workforce
Productivity
Product
Development
Cloud
Advancement
Cybersecurity
Infrastructure
Performance
BUSINESS
PROCESS &
SOFTWARE
SOLUTIONS
BUSINESS
INFRASTRUCTURE
& SYSTEMS
SOLUTIONS
Consulting, IT Leadership and Management
8

9. 888.796.6783
www.synoptek.com Synoptek @synoptekservice
@Synoptek
© 2021 Synoptek
9