Contact

Projects

Security assessment
and improvement in enterprise environments.

Security assessment and automation projects for corporate websites, platforms and CRM software.

Automotive

German automotive
company

Corporate website security assessment

We assessed input validation, access control and security configuration, and documented reproduction evidence and remediation recommendations in a report.

Website penetration testing · Assessment report
Web & API platform

Membership-based
service platform

Authentication, access control and retesting

We assessed user-specific access permissions, the validity period of authentication credentials and API responses, then conducted follow-up assessments.

Authentication · Sessions · Information disclosure
Enterprise software

Swiss CRM
software

Web & API assessment and AI test automation

We assessed server-side input validation and built an environment for repeatedly testing the responses and tool execution of AI used in business workflows.

Web & API penetration testing · AI test automation

Published vulnerability research

CVE-2025-45055

We discovered and reproduced stored XSS and escalation to administrator privileges through SVG attachments, and reported the vulnerabilities to the vendor.

Research record NVD entry (new tab)
Technical case studies and reports Client and developer recommendations

Security assessment tailored to your business environment.

We review your service and requirements to propose an appropriate scope.

Project enquiry
ANONYMISED / SAMPLE REPORT
FELSEN SECURITY / WEB ASSESSMENT

Security assessment
Sample report

An anonymised Korean-language excerpt following the format of an actual security assessment report. Client identifiers have been removed, and omitted passages are marked in the document.

Executive summary
Summarises the distribution of vulnerabilities and remediation priorities.
Scope and methodology
Specifies the assessment targets, validation methods and scope.
Detailed analysis excerpts
Explains missing HSTS headers and input format validation with sample responses.
Remediation guidance
Sets out the impact of vulnerabilities and the improvements required.

Korean · PDF · 8 pages · 739 KB

Download PDF Open in a new tab ↗

Anonymised and reconstructed from past assessment work. This does not describe a client’s current security status or confirm that remediation is complete.
PRIVACY NOTE

How inquiry information is handled

This site’s inquiry form does not send your entries to its own server or store them in browser storage. We do not use analytics tools or marketing cookies.

The email button opens your email app. You send the message yourself from that app. Include only the information needed for your inquiry, and do not send passwords, access tokens or actual client data.

Copying your inquiry and saving files take place on your device when you press the relevant button. The hosting provider may process connection information needed to operate the service.

For inquiries and requests to delete information: mingi.hong@gainge.com