Clear reporting for leadership and technical teams.
Omni Cyber reports explain business risk, technical evidence, affected assets, and practical remediation steps in one structured deliverable.
Executive Summary
This sample illustrates how findings are summarised, prioritised, and linked to remediation guidance for both business and technical stakeholders.
Broken Access Control
CriticalUnauthorised access to restricted business data through predictable object references. Authenticated users could access records belonging to other accounts by modifying a single parameter in the request.
Implement server-side authorisation checks on every data access. Validate that the requesting user owns the requested resource before returning data.
Insecure File Upload
HighFile upload validation relied only on client-side checks and file extension filtering. An attacker could upload executable content by manipulating the Content-Type header, potentially leading to remote code execution.
Validate file content server-side using magic bytes. Store uploads outside the web root and serve via a controlled endpoint. Restrict permitted MIME types and enforce size limits.
Weak Session Management
HighSession tokens were not invalidated on logout and had no expiry enforced server-side. A stolen token remained valid indefinitely, allowing persistent unauthorised access after a user had signed out.
Enforce server-side session expiry. Invalidate tokens immediately on logout. Rotate tokens after privilege changes such as login or role escalation.
Missing Security Headers
MediumContent-Security-Policy, X-Frame-Options, and Referrer-Policy headers were absent across public-facing pages. This increases exposure to clickjacking, data leakage via referrer, and script injection attacks.
Add a strict Content-Security-Policy. Set X-Frame-Options to DENY. Configure Referrer-Policy to strict-origin-when-cross-origin across all responses.
Verbose Error Messages
MediumApplication error responses included stack traces, internal file paths, and framework version information. This provides an attacker with a detailed map of the application internals to assist further exploitation.
Configure a generic error handler for all production environments. Log detailed errors server-side only. Return a minimal, user-friendly error response to clients.
Information Disclosure
LowHTTP response headers exposed the web server version and framework. Non-sensitive but reduces the effort required for targeted enumeration.
Remove or suppress Server, X-Powered-By, and X-AspNet-Version headers. These headers provide no user benefit and should not be present in production.
Want reporting like this?
Speak to Omni Cyber to discuss penetration testing and reporting requirements.
Request Assessment