Independent Penetration Testing - August 2022

A penetration test is an interactive security test undertaken to identify security vulnerabilities that are actually exploitable.

In accordance with Wellnomics Security Development Lifecycle (SDLC) Policies and Procedures Independent Penetration Testing is conducted annually on the latest version of Wellnomics SaaS (Wellnomics Risk Management).  This is done to ensure that Wellnomics solutions meets the highest standards for security and provides customers with confidence that all efforts are carried out to avoid vulnerabilities in Wellnomics solutions.

Independent security specialists, CyberCX - https://cybercx.co.nz/were engaged to perform a full penetration test on (pre-release) Wellnomics SaaS version 4.12.0 application and API on an Azure hosted server. The initial report found, no high, six medium and 3 low priority issues.

All issues highlighted have been resolved to ensure all security vulnerabilities have been removed.  The version has since been released to customers.

An official statement from CyberCX confirming the Application Security Review above is attached below.