One of the largest healthcare organizations in the world
- Hospital & Health Care
- Very Large
Kratikal helped one of the largest healthcare organizations secure its AI-enabled medical equipment. The organization faced risks from weak password... policies, outdated encryption, and exploitable vulnerabilities in their healthcare management systems. Kratikal performed live, gray box security testing on medical devices and network connections. They found critical issues like account takeover, host header injection, and weak lockout mechanisms. The findings helped the client reduce risks of data breaches, equipment malfunction, and patient safety threats.
the largest private medical service provider in India
- Hospital & Health Care
- Large
India
Kratikal performed security testing for the largest private medical service provider in India. The hospital operates across India and serves... over 100,000 patients daily. Kratikal found that MRI scanners, CT scanners, and radiology equipment were highly vulnerable to cyber attacks. Risks included remote takeover, data theft, and potential harm to patients. Kratikal provided solutions, patches, and policy recommendations to improve device and network security.
Leading healthcare provider (anonymous)
- Hospital & Health Care
- Large
Kratikal performed medical device security testing for a leading healthcare provider. The provider faced risks like SQL injection, XSS, and... session fixation in their real-time patient engagement platform. Kratikal identified vulnerabilities in IOT medical equipment and application interfaces. The team used grey box testing and industry best practices to uncover threats. Recommendations included input sanitization, session management, and restricting sensitive data exposure. The findings helped the provider reduce risks to patient safety and data confidentiality.
Leading Indian cryptocurrency wallet provider
- Financial Services
- Medium
India
Kratikal performed a live security test for a top Indian cryptocurrency wallet provider. The wallet handled over 10,000 daily transactions... and $30 million in digital currency. Kratikal found critical flaws, including the ability to manipulate wallet values and bypass two-factor authentication. These issues could have led to daily losses of $1.2 million and major data breaches. Kratikal recommended server-side checks, stronger authentication, and advanced cryptographic controls.
Lifestyle fashion brand (anonymous)
- Apparel & Fashion
- Medium
Kratikal’s Managed Security Services helped a lifestyle fashion brand address web application security risks. The brand faced issues like HTML... injection, weak password policies, and insecure password reset links. Kratikal performed penetration testing using OWASP and SANS standards. They found vulnerabilities that could lead to data leaks, privacy breaches, and financial losses. The team provided detailed risk mitigation steps to improve application security and protect sensitive client data.
Leading cloud communication SaaS provider (anonymous)
- Information Technology And Services
- Medium
Kratikal performed web application penetration testing for a leading SaaS cloud communication provider. The company wanted to find vulnerabilities and... protect user data. Kratikal found issues like billing parameter tampering, data leaks, and weak SSL. Attackers could buy subscriptions for free and access sensitive client data. Kratikal gave recommendations to fix these risks and improve security.
Automotive Case Studies and Customer Success Stories with KDMARC
Car rental company (anonymous)
- Automotive
- Medium
Kratikal's security testing team helped a car rental company secure its web and mobile apps. The company faced risks like... user data tampering, reverse engineering, and server exploits. Vulnerabilities exposed 0.5 million user records and allowed attackers to book cars at the lowest price, risking $184k monthly losses. Kratikal identified flaws in SSL/TLS, app code, and server access. The team provided fixes to prevent privilege escalation, fake bookings, and data breaches.
DPDP Compliance Is Now Mandatory for the Healthcare Industry
Kratikal, a CERT-In empanelled security auditor, offers comprehensive support for healthcare organizations to comply with India's Digital Personal Data Protection (DPDP) Act 2023. They provide services... like compliance audits, data governance frameworks, and breach readiness planning to help healthcare providers meet stringent data privacy requirements, ensuring patient trust and minimizing legal risks.
