Findings3 min read
Tenant isolation: the bug class SaaS teams keep shipping
One account reaching another account's data is the finding we report most often, and it almost always arrives through the same three doors.
Vaptiq Testing Team
[ Writing ]
Real classes of bug, how we prove them, and what the fix costs.
One account reaching another account's data is the finding we report most often, and it almost always arrives through the same three doors.
Vaptiq Testing Team
Predictable reset tokens are account takeover waiting to happen. The entropy failures we find, and the four-line fix.
Vaptiq Testing Team
If one of these describes a system you own, tell us which one. We will tell you what a test would cover and what it would cost, in writing.