Case Study: ING Insurance detects more vulnerabilities with fewer false positives using Invicti

ING EURASIA IT Audit Team Chooses Invicti to Detect Web Application Vulnerabilities

ING Insurance, a global financial institution with extensive internal and customer-facing web applications, needed an automated, easy-to-use solution to continuously audit and secure its online banking, portals, life insurance and investment sites. The ING Eurasia IT Audit team selected the Invicti web application security scanner to meet these requirements across a wide variety of custom-built web frameworks.

Invicti was deployed out of the box with minimal configuration, supporting many web technologies and producing meaningful reports. The tool identified more vulnerabilities than other scanners the team evaluated—finding several SQL injection and cross-site scripting issues missed by competitors—reported no false positives, and reduced auditors' time spent on configuration and validation.

ING Insurance

Perry Mertens

Audit Supervisor