Services / Offensive security & VAPT

Penetration Testing & VAPT Programme Management

Testing that ends with exposure fixed, not just reported. I managed vulnerability assessment and penetration testing of the Bangladesh central bank's payment system and a national VAPT programme for government.

What's included

  • Scoping and rules of engagement for penetration tests
  • Vendor selection and test management
  • Vulnerability management programme design
  • Remediation tracking and retesting
  • Executive and technical reporting

The outcome

Real exposure found and fixed, not just reported.

Relevant experience

All projects

Apr 2019 – Sep 2019

Central bank payment-system VAPT

Bangladesh Bank (central bank) · BACH-II

Managed vulnerability assessment and penetration testing of the central bank's BACH-II clearing system.

  • Central bank clearing system tested
  • Offensive security

2019 – 2020

National VAPT, IT audit & risk programme

BGD e-GOV CIRT

Ran national VAPT, IT audit and risk programmes that uncovered nation-state campaigns against banks.

  • 500+ critical vulnerabilities found
  • Nation-state campaigns against banks identified
  • Offensive security
  • Audit & risk

Related insights

All articles

Ransomware Facts and Mitigation Tips

What ransomware is, how it gets in, and eleven practical habits that keep individuals and organisations out of the ransom conversation.

  • Awareness
  • Security Operations