Penetration testing & continuous daily vulnerability scanning for threat assessment

To support its strategic growth, Crafter's Companion set out to enhance its cybersecurity posture with the goal of achieving Cyber Essentials Plus and ISO 27001 certification. A prior white box penetration test had highlighted the limitations of internal testing, prompting the company to seek a specialist cybersecurity provider to deliver more rigorous and objective assessment.

The company engaged Melius CyberSafe to conduct a black box penetration test - offering a more realistic simulation of an external cyberattack, as the tester had no prior knowledge of the systems. The test identified key vulnerabilities, each clearly prioritised by severity and accompanied by actionable remediation guidance.

Recognising that penetration testing provides only a snapshot in time, the company also subscribed to the CyberSafe platform. This 24/7 continuous monitoring solution delivers near real-time visibility of vulnerabilities across the IT estate, enabling proactive remediation and ongoing risk management throughout the year.

With a clearer understanding of its risk landscape and access to up-to-date vulnerability data, Crafter's Companion is much better positioned to achieve Cyber Essentials Plus and ISO 27001 certifications.

Continuous daily monitoring has also significantly lowered the company’s risk profile, strengthened its security posture, and enhanced its ability to demonstrate robust cybersecurity credentials to stakeholders.