Penetration test of a district council parking app
District council, Cotswolds
- Challenge
- The council's parking permit app, built by a small supplier, handled payment card details and vehicle registrations for 18,000 residents. It had never been independently tested, and the council's cyber insurance renewal required evidence of a test within the quarter.
- Solution
- AGS carried out a scoped penetration test of the mobile app and its backend APIs, reported findings with reproduction steps and severity ratings, and worked with the supplier to verify each fix. A re-test confirmed the closures and produced a letter suitable for the insurer.
- Results
- 2 high and 7 medium findings identified and fixed
- Re-test completed 3 weeks after the initial report
- Insurance evidence delivered 11 days before the deadline