Case Study: Morneau Shepell secures 600+ websites and eliminates critical vulnerabilities with Invicti (Netsparker Enterprise)

Morneau Shepell Secures More Than 600 Websites Without an Army of Penetration Testers

Morneau Shepell, a Toronto-based pension administration and benefits company serving over 8,000 clients, needed to scan and secure more than 600 web applications monthly to protect sensitive client data. Their previous scanner, Nessus, produced unreliable results and required extensive manual verification, so they adopted Invicti’s Netsparker Enterprise to automate verification and simplify vulnerability management.

Invicti deployed Netsparker Enterprise for credentialed monthly scans (and ad hoc daily scans), automatically confirming vulnerabilities and generating actionable reports. As a result Morneau Shepell secured more than 600 sites, closed all critical SQL injection and XSS flaws, reduced findings to mostly low IIS configuration alerts, and drastically cut the manual effort and reliance on large penetration-testing teams.

Morneau Shepell

Mihai Petre

Security Analyst