All casesComprehensive Marketplace Pentest
E-commerce2025-09Confidential Client

Comprehensive Marketplace Pentest

Major marketplace with 5M+ active users and mobile apps for iOS and Android.

62
vulnerabilities
12
critical
4 weeks
Timeframe

Challenge

After several customer data breach incidents, a complete security audit of the entire platform was required.

Solution

Three-week testing of web platform, API and mobile applications. Critical IDOR vulnerability discovered allowing access to orders and personal data of any user.

Results

  • Found 62 vulnerabilities, 12 critical
  • Discovered 2TB data leak via unprotected S3 bucket
  • Implemented WAF and monitoring system
  • No repeat incidents recorded

Services

pentest-webpentest-mobilepentest-api

Need a pentest?

Order a security audit and protect your business from threats

Discuss project