Case Study: US Guaranty Association strengthens compliance and vendor risk management with ScienceSoft black-box penetration testing

US Guaranty Association uncovers 11 vulnerabilities with ScienceSoft

ScienceSoft conducted a black-box penetration test for US Guaranty Association, a US non-profit health and life insurance guaranty association. The client needed to secure its proprietary web application and integrated third-party services to protect sensitive policyholder data and ensure compliance with regulations like HIPAA and GLBA.

ScienceSoft's testing revealed that while the client's own systems were secure, 11 vulnerabilities were found across 11 integrated third-party services. This provided the client with crucial evidence for compliance audits and empowered them to engage vendors for security fixes, thereby enhancing their overall data protection and vendor risk management strategy.