Skip to content

Pen Testing: More IT-Security for CoinTracking

Case Study from 16 September 2024

The Challenge of CoinTracking

CoinTracking is a leading provider of software solutions for the cryptocurrency industry. The company offers a platform that allows users to track, control and optimize their cryptocurrencies. In addition, tax reports can be created that automatically adapt to the tax laws of the respective country.

CoinTracking GmbH felt compelled to improve its IT security measures in view of the growing risk of cyberattacks and the increasing complexity of the IT world. The company wanted to review and improve its security measures in order to guarantee the confidentiality, integrity and availability of its own data. The aim was to conduct a comprehensive penetration test to test the effectiveness of the current security measures and identify potential vulnerabilities in order to increase the security of the web application hosted in the cloud.

Tags
Security & Compliance
Industries
Software (ISV)
Share it

The Solution

PCG X Google conducted an aggressive penetration test based on a black box approach. This approach made it possible to evaluate the security of the CoinTracking web application from the perspective of an external attacker. The test included a variety of techniques, including port scanning, system and application identification, vulnerability research and verification, and a dedicated web application review.

PCG X Google provided a detailed final report that not only described the identified vulnerabilities and their verification, but also included recommendations for their remediation. By using commercially available security applications and customized scripts and payloads, PCG X Google was able to create a comprehensive picture of CoinTracking’s security posture.

Results and Benefits

PCG X Google’s penetration test gave CoinTracking a clear insight into their IT security situation and enabled them to take targeted measures to improve it. The collaboration led to increased security of their technical systems and strengthened their customers’ trust in their services.

CoinTracking says

CoinTracking logo color

The security of our web application is our top priority. With the help of the penetration test carried out by PCG, we were able to proactively identify and close potential security gaps. In addition, the experts from PCG were always available to answer any questions we had. Many thanks for the professional support and advice!

Bünyamin Ögdüm
Head of Account Management @ CoinTracking

About PCG

Public Cloud Group (PCG) supports companies in their digital transformation through the use of public cloud solutions.

With a product portfolio designed to accompany organizations of all sizes in their cloud journey and competence that is a synonym for highly qualified staff that clients and partners like to work with, PCG is positioned as a reliable and trustworthy partner for the hyperscalers, relevant and with repeatedly validated competence and credibility.

We have the highest partnership status with the three relevant hyperscalers: Amazon Web Services (AWS), Google, and Microsoft. As experienced providers, we advise our customers independently with cloud implementation, application development, and managed services.

Services used

Pen Testing for Businesses

Our certified experts (including OSCP) simulate realistic cyberattacks on your IT infrastructure – from web applications and APIs to networks, cloud environments, and mobile apps.

PCG and AWS Logo

Migrating to the cloud to design for great customer relations

SmartGolfa is a web and mobile platform that allows users to play golf at their own pace. Users can buy golf packages that can be used throughout a network of courses in Sweden, according to their schedule. Teevolution started SmartGolfa in 2009. Since its launch, the platform has experienced continuous growth. The idea for SmartGolfa was born from the simple concept of making golf more digitally accessible and opening the market to a new audience, by keeping costs down. The application allows users to book start times on 60+ golf courses and buy greens fees. Users also have the option to be rewarded with free greens fees by recruiting friends. Users log in with their phones to purchase packages that can be used throughout the golfing season. SmartGolfa is a web and mobile platform that allows users to play golf at their own pace. Users can buy golf packages that can be used throughout a network of courses in Sweden, according to their schedule. Teevolution started SmartGolfa in 2009. Since its launch, the platform has experienced continuous growth. The idea for SmartGolfa was born from the simple concept of making golf more digitally accessible and opening the market to a new audience, by keeping costs down. The application allows users to book start times on 60+ golf courses and buy greens fees. Users also have the option to be rewarded with free greens fees by recruiting friends. Users log in with their phones to purchase packages that can be used throughout the golfing season.

Contact