Pentest for a best-in-class software developer

Global Mediator empowers companies to accelerate their digital transformation of business processes on the Microsoft technology stack. Global Mediator focuses on Dynamics 365 Business Central, Power Platform, .NET, and technologies that drive business growth. Global Mediator is one of the largest development centres in Eastern Europe.

The engagement aimed to comply with ISO 27001 requirements for IT risk identification through vulnerability testing — simulating hacker attacks to gain unauthorised access, escalate privileges, or disclose confidential information. Network and Application Security Testing with Blackbox and Graybox methodologies was required.

During pentesting, a full set of common pentester tools was used — but the main key to success was manual analysis: interconnecting individual vulnerability exploitation results to escalate privileges and demonstrate practical IT-infrastructure compromise.

The client gained a clear understanding of their cybersecurity posture, vulnerabilities, and areas requiring improvement. The testing provided insights into potential exploits, enabling risk mitigation and defence strengthening.

The pentest helped fulfil ISO 27001 requirements, achieving certification and demonstrating commitment to information security best practices. The project delivered actionable intelligence and a roadmap to address security gaps, harden IT infrastructure and applications against cyber threats, and ensure compliance.