Contact us: info@tenendo.com

Security

We are proud of our team and what we do and have decided to partially share our past projects and cases to provide our customers with a behind-the-scenes look at our process and our past experience. We made sure all cases are anonymous and do not disclose any confidential information, but still provide valuable insight.

Critical Credential Exposure. External and AWS Penetration Testing Case Study.

A payment provider's pre-transaction AWS review looked clean — until we found a public Spring Boot Actuator endpoint leaking a heap dump with live credentials for a privileged production role. No exploit chain needed: just download, extract, and the cloud environment was ours. Here's why we don't separate AppSec from infrastructure testing, and w…

Payment processing API penetration testing

Tenendo specialists discovered an unattended staging environment and leveraged its vulnerabilities for sensitive information disclosure. This information was later reused in an attack against the main application, that allowed us access to the payment API on behalf of other customers of our Client.

Case Study: Strengthening Compliance with NIST CSF 2.0

Poor network segmentation enabled an attacker to pivot from internal access to full cloud takeover.