Comprehensive Security Overhaul Achieves Full Compliance and Minimal Pen Test Findings
The Challenge
We were tasked with implementing a strategy to secure all websites of the Oxford Insurance Group. This involved full-scale penetration testing, replatforming all websites from SilverStripe to WordPress, and introducing our unique security model with internal and external WAFs, CMS masking, and daily malware scanning.
Goals & Objectives
The goal was to enhance the security of all group websites, ensuring they are fully protected against vulnerabilities and comply with industry standards.
Our Approach
Our process involved replatforming the websites to WordPress, integrating advanced security measures such as internal and external WAFs, CMS masking, and establishing a routine of daily malware scanning. We also conducted comprehensive penetration testing.
Key Metrics
Penetration Test Findings, Compliance in Security Audit
The Results
The results were highly successful, with only a handful of low-priority fixes needed post-penetration testing and full compliance achieved in the security audit.