Pen Testing: More IT-Security for CoinTracking
The Challenge of CoinTracking
CoinTracking is a leading provider of software solutions for the cryptocurrency industry. The company offers a platform that allows users to track, control and optimize their cryptocurrencies. In addition, tax reports can be created that automatically adapt to the tax laws of the respective country.
CoinTracking GmbH felt compelled to improve its IT security measures in view of the growing risk of cyberattacks and the increasing complexity of the IT world. The company wanted to review and improve its security measures in order to guarantee the confidentiality, integrity and availability of its own data. The aim was to conduct a comprehensive penetration test to test the effectiveness of the current security measures and identify potential vulnerabilities in order to increase the security of the web application hosted in the cloud.
The Solution
PCG X Google conducted an aggressive penetration test based on a black box approach. This approach made it possible to evaluate the security of the CoinTracking web application from the perspective of an external attacker. The test included a variety of techniques, including port scanning, system and application identification, vulnerability research and verification, and a dedicated web application review.
PCG X Google provided a detailed final report that not only described the identified vulnerabilities and their verification, but also included recommendations for their remediation. By using commercially available security applications and customized scripts and payloads, PCG X Google was able to create a comprehensive picture of CoinTracking’s security posture.
Results and Benefits
PCG X Google’s penetration test gave CoinTracking a clear insight into their IT security situation and enabled them to take targeted measures to improve it. The collaboration led to increased security of their technical systems and strengthened their customers’ trust in their services.
CoinTracking says
The security of our web application is our top priority. With the help of the penetration test carried out by PCG, we were able to proactively identify and close potential security gaps. In addition, the experts from PCG were always available to answer any questions we had. Many thanks for the professional support and advice!
About PCG
Public Cloud Group (PCG) supports companies in their digital transformation through the use of public cloud solutions.
With a product portfolio designed to accompany organizations of all sizes in their cloud journey and competence that is a synonym for highly qualified staff that clients and partners like to work with, PCG is positioned as a reliable and trustworthy partner for the hyperscalers, relevant and with repeatedly validated competence and credibility.
We have the highest partnership status with the three relevant hyperscalers: Amazon Web Services (AWS), Google, and Microsoft. As experienced providers, we advise our customers independently with cloud implementation, application development, and managed services.
Services used
Pen Testing for Businesses
Our certified experts (including OSCP) simulate realistic cyberattacks on your IT infrastructure – from web applications and APIs to networks, cloud environments, and mobile apps.