Web application penetration test for Docklet
A full OWASP-based penetration test of a SaaS platform ahead of an enterprise deal. A case study by James O'Connor, Penetration Tester & Security Consultant.
Challenge
Docklet, a document automation tool, needed an independent penetration test report to close a deal with a bank, with a deadline four weeks away.
Solution
I tested the web app and API against the OWASP Testing Guide, including business-logic abuse and multi-tenant isolation, reported critical issues the same day and retested all fixes before the final report.