Pentest Automation at "Tensor": Securing Saby's Infrastructure

Vulnerabilities that are discovered and patched can reappear after software updates. The "Tensor" company shares its experience in preventing such incidents in a scaling infrastructure.

The Saby infrastructure includes 4.5 million clients, 12 thousand servers, and 6.5 petabytes of data. Constant system updates require regular assessment of resilience against cyberattacks.

Manual pentests allowed finding vulnerabilities within five days, but the process was resource-intensive. To optimize the security audit, the team implemented the PT Dephaze tool.

The automated system checks devices for more than 100 compromise techniques monthly. This allows identifying new attack vectors immediately after updates.

Freeing up specialists' time from routine checks contributes to researching non-standard attack chains and finding zero-day vulnerabilities (0-day).