Case Study: Digital Technology Solutions Provider Strengthens Digital Wallet Security with Indium Software

VAPT for a Digital Wallet Payment Application

Digital Technology Solutions Provider, an established company focused on telecommunications, media, and IoT, needed to secure its digital wallet payment application across mobile, POS terminal, merchant portal, admin portal, hosting, database, and API layers. Indium Software was engaged to perform a comprehensive VAPT assessment for the Android and iOS apps and related platforms.

Indium Software carried out OWASP Top 10–based vulnerability testing using tools and manual scripting, along with regression testing across mobile devices, the POS terminal, web portals, APIs, and host/database configurations. As a result, Indium Software identified eight vulnerabilities in total, including moderate issues such as broken authentication, session management flaws, CSRF, insecure authentication, and insecure authorization, plus low-risk sensitive data exposure and insecure data storage findings.