MEX Completes 2024 Penetration Test

Over the past several years, MEX has conducted yearly penetration tests, which are a vital part of our R&D team's commitment to enhancing the MEX Maintenance Software. These annual reviews play a critical role in ensuring the security, reliability, and continuous improvement of our platform, all while adhering to ISO standards.

By proactively identifying vulnerabilities and improving areas such as authentication, data security, and access control, we keep MEX at the forefront of secure software solutions. We're proud to report that this year's penetration test allowed us to identify and remediate several potential security vulnerabilities.

Proactive Security and Improvements

All of our penetration tests follow the Common Vulnerability Scoring System (CVSS) standards. During the most recent test, conducted in September 2024, our team quickly identified and addressed several priority issues.

This proactive approach allows us to deliver a more secure and robust experience for our users, ensuring the MEX Maintenance Software remains safe, reliable, and ready to meet the demands of your business.

Highlighted Improvements:

• Enhanced User Authentication: We've strengthened the login and password reset processes to prevent unauthorised access and ensure a more secure user experience.
• Administrator Security Upgrades: New layers of access control and permissions management provide administrators with greater flexibility to manage user privileges and protect system integrity.
• Improved File Upload and API Security: We've enhanced verification processes for API credential validation and file uploads, ensuring tighter control over data handling and reducing exposure to threats.
• Updated Cross-Domain Policies and CORS Headers: We addressed cross-domain vulnerabilities by fine-tuning our security policies to prevent potential unauthorized data access or misuse.
• Session Management Improvements: We've optimised session timeout settings to improve the security of idle sessions, reducing risks associated with unattended user sessions.

Moving Forward

As threats evolve, so does our commitment to maintaining a secure product. These annual penetration tests and the improvements we make ensure that MEX continues to provide the highest levels of security for our customers. By staying proactive and adhering to rigorous security standards, we aim to offer an exceptional software experience that you can trust.

If you have any questions or would like further details about our 2024 penetration test, feel free to reach out to us at info@mex.com.au.