Fintech Firm Cuts Critical Exposure by 72%
Client
Northpay
Category
Cloud Security
Date
Timeline
12 weeks
72%
Reduction in critical exposure
12
Weeks from discovery to results
1,400
Findings ranked by exploitability
0
Major PCI DSS audit findings
Industry
Financial Technology
Services Used
Cloud Security
Compliance & Risk
Penetration Testing
Northpay processes millions of card payments a month. Rapid growth had left hundreds of cloud accounts with inconsistent settings and a backlog of critical findings that no team could realistically clear.
Leadership needed two things at once: a meaningful drop in real risk, and a clean PCI DSS audit, all without pausing the product roadmap. The existing tooling reported plenty of problems but offered little guidance on where to begin.
Discovery
We mapped every cloud account and ranked 1,400 findings by real exploitability rather than raw severity. Internet-facing assets with paths to payment data moved straight to the top, and a large share of the old backlog turned out to carry little practical risk.
Remediation sprint
Automated guardrails fixed the most common misconfigurations, while our engineers paired with Northpay’s teams on the rest. New infrastructure checks in the delivery pipeline stopped the same issues from coming back after each release.
Results
Critical exposure dropped by 72% in twelve weeks, and the company passed its PCI DSS audit with zero major findings. Engineers now work from one ranked list, and new accounts inherit secure defaults from the day they are created.
For the first time, our engineers knew exactly which issues mattered. The backlog stopped feeling impossible.
Dana Whitfield
VP of Engineering, Northpay
Related Projects
Recommended Projects
Infrastructure
Energy Provider Secures Critical Infrastructure
Network segmentation and OT monitoring protected power distribution systems from remote attacks.
Compliance
SaaS Startup Achieves SOC 2 in 90 Days
A fast-growing SaaS company went from no formal program to a clean SOC 2 Type I report in three months.
