Skip to main content
All projects

Vulnerability Management Platform

Vulnerability management for a life insurance company — brings results from many scanners into one place and tracks every fix until it is closed.

Client
Life insurer · South Korea · 2025
Field
Finance · Security
Vulnerability Management Platform

Overview

  • An internal admin web app for a life insurance company in South Korea, used by the information security team, remediation teams and approvers.
  • Brings results from many scanners — infrastructure, web applications, source code and open-source libraries — into one place.
  • Replaces scattered Excel files: every vulnerability has an owner, a due date and a full history.
  • A closed loop: assign → fix → submit evidence → review → re-test → close, with electronic approval for exceptions and results.
  • Connected to single sign-on (SSO), the internal IT asset system and corporate email; deployed on-premise.
  • Townsoft handles business analysis, UI design, front end, back end and maintenance. Live since 2025, with two releases a month.

Key features

Scan result integration

  • Imports from 4 kinds of scanners: SAST, DAST, infrastructure and open source
  • Normalises severity and removes duplicates
  • Keeps history for every scan round

Remediation

  • Assign owners and due dates
  • Submit evidence, review and re-test
  • Register exceptions when a fix is not yet possible

Electronic approval

  • Multi-level approval
  • A personal approval inbox
  • Complete approval history

Assets and permissions

  • Syncs the IT asset inventory
  • Role- and organisation-based permissions
  • Single sign-on (SSO)

Notifications

  • Automatic emails on assignment, approaching and overdue deadlines
  • A discussion board per vulnerability with comments and attachments

Dashboards and reports

  • Statistics by severity, scanner and department
  • Monthly trends for management
  • Export to Word, Excel and PDF