A certain Fintech company

Background

As an enterprise with internet genes, all business applications and office tasks entirely use cloud solutions;

Relevant Fintech financial technology remains a target for competitors and hacker groups, with Target Attacks and Advanced Persistent Threats (APTs) posing continuous threats.

Requirements

Validate the effectiveness of various security defense means used to protect data assets;

Need to discover weaknesses in the security defense system from an attacker's perspective, targeting different attack stages and techniques;

Need quantitative bases to support future security planning.

Current Situation

The defense system already includes:

Cloud security-related solutions (Cloud FW, Cloud WAF, Cloud Endpoint/Host Security, Cloud Email Security, DevSecOps, Container Security, Code Security, etc.), Zero Trust Access, etc.

Security operations team, SOC, SOAR, threat intelligence, and other platforms

Services Provided by Cyritex

Provide the Cyritex Security Measurement Validation Platform, utilizing rich simulated attacks covering various attack stages and techniques to simulate in real production environments, identifying weaknesses in the defense system;

Integrate with the SOC platform to retrieve alert logs from various security products, achieving closed-loop validation to determine whether relevant security defense means respond normally;

Provide quantitative data to support future security planning.