Meet Roger
Cyrex partnered with Meet Roger to conduct grey box penetration testing across its web and mobile applications, strengthening authentication, access controls, and business logic security to support enterprise client assurance.
The Challenge
Securing a Multi-Channel Employee Communication Platform
Meet Roger provides a unified internal communication platform designed to replace fragmented tools with a single, streamlined solution. With both web and mobile applications in scope, the platform handles sensitive internal company communications and user data.
The inclusion of a mobile application introduced additional attack surfaces, particularly around:
- Push notification handling
- Session management across devices
- Authentication and authorization logic
- Access control enforcement
Meet Roger required structured penetration testing to validate security maturity and provide documented assurance to enterprise clients.
The Cyrex Solution
Grey Box Penetration Testing Across Web & Mobile
Cyrex conducted comprehensive grey box penetration testing across both the web and mobile environments.
This approach combined architectural insight with realistic attack simulation to evaluate exposed services and internal logic.
Core Security Assessment Areas
Our engagement included testing of:
- Authentication and session management workflows
- Information disclosure risks
- Access control flaws
- Denial-of-service (DoS) protection mechanisms
- Business logic vulnerabilities
Special attention was given to mobile-specific considerations, including push notification handling and session persistence across devices.
Vulnerability Identification & Validation
Cyrex identified multiple vulnerabilities, several considered critical by the Meet Roger team.
We delivered:
- A comprehensive and clearly structured security report
- Risk-based prioritization of findings
- Actionable remediation guidance aligned with best practices
After patches were applied, Cyrex performed full sanity and regression testing to confirm that vulnerabilities were resolved and no new weaknesses were introduced.
The Outcome
Demonstrable Security Maturity for Enterprise Clients
- Identification and mitigation of critical vulnerabilities
- Improved authentication and access control enforcement
- Enhanced protection against business logic exploitation
- Documented proof of security maturity for enterprise stakeholders
Client Feedback
Meet Roger
“We urgently needed penetration, regression, and sanity test reports to prove our breach protocol, professionalism, and system security to one of our biggest customers. The agile and efficient work done by Cyrex was a perfect fit for our team.”
Don't Let Players Find the Weakness
Your launch is months away. Hackers will find exploits in hours. Let our engineers secure your game before it's too late.
Response time: <24 hours • NDA included • No commitment required