Customer Case: SeniorWeb x Tozetta
Carrying out a pentest at Tozetta — how does that pentest process work? SeniorWeb is a Tozetta client and tells us more about the collaboration.
Every so often, we like to give some insight into the collaborations Tozetta has. A great project that was recently completed was this one with SeniorWeb. SeniorWeb is an association that helps seniors become digitally skilled. SeniorWeb's website is an essential tool for providing this target audience with information, help and courses.
IT manager Mark de Ruijter tells us more about the collaboration below!
What was the reason SeniorWeb had a pentest carried out?
Mark: "We want to offer our target audience a safe online platform! To make sure the website is safe and reliable, SeniorWeb decided to have a pentest carried out. A pentest, or penetration test, is a way to find the weak spots of a website or system. In our view, it's a perfect way to find out where we stand when it comes to cyber security.
Even though Tozetta is relatively new, we knew right after the first conversations that they're a specialist in the field of ethical hacking and cyber security."
What can you tell us about Tozetta's approach?
Mark: "With SeniorWeb's permission, Tozetta tried out various attacks on the website, such as SQL injection, cross-site scripting and brute force. The goal was to check whether the website was resistant to hackers and whether no privacy-sensitive data could be exposed."
SeniorWeb is very happy with Tozetta's service — communication was clear and good, and everything was ultimately laid out in a professional report.
Mark de Ruijter, ICT Manager
How did the pentest turn out?
Mark: "The outcome of the pentest was positive: SeniorWeb's website was reasonably well protected and had no serious gaps. Tozetta did provide areas for improvement in an extensive report, which were implemented after an oral explanation from SeniorWeb's developers.
SeniorWeb can therefore recommend Tozetta's services to anyone."
Want a pentest carried out?
Curious about the value a pentest can offer your organization? Get in touch, no obligation — we're happy to tell you more about the possibilities.