12-month penetration testing program for ING Bank Śląski

Client

ING Bank Śląski S.A. — one of the largest and most innovative financial institutions in Poland, serving millions of retail and corporate customers.

Challenge

As an institution of public trust, the bank places the highest priority on data security, system stability and compliance with international security standards. In the face of growing cybercrime threats and new EU regulations (DORA), ING Bank Śląski partnered with Remote Admin to carry out comprehensive security testing. Before the engagement began, the bank needed to be certain it was entrusting its security to a partner with the highest standards — the initial vetting, conducted by two ING security departments, covered our procedures, data processing security and team qualifications.

Scope of work

• The project covered a year-long cycle of penetration testing of critical infrastructure and web applications
• Black-box methodology: without specialist knowledge of the internal code and infrastructure — simulating the actions of external cybercriminals
• Verification against the OWASP Top 10 most common web threats and banking-specific attack vectors
• Compliance with the OWASP Application Security Verification Standard (ASVS) and the requirements of the Digital Operational Resilience Act
• Assessment of procedures, data processing security and team qualifications

How the engagement worked

Results and value for the client

Over the year-long engagement, the team proved highly effective at identifying threats that could have exposed the bank to financial or reputational losses. Critical and High vulnerabilities (per CVSS classification) were discovered, including potential unauthorized privilege escalation and access to sensitive data. All reported vulnerabilities were verified against the OWASP Top 10 most common web threats and banking-specific attack vectors. The bank achieved full OWASP-aligned testing and readiness for DORA’s digital operational resilience requirements set by supervisory authorities.

The project culminated in ING Bank Śląski issuing official references for Remote Admin, confirming the professionalism, timeliness and high technical quality of the audits performed.