Validating wireless security across two branches of a regional credit union.
// the engagement
Assura's offensive security team performed an on-site wireless penetration test at two branches of a regional credit union. Scope included rogue access point detection, captive-portal bypass attempts, segmentation testing between guest and corporate SSIDs, and authenticated lateral-movement attempts from the corporate Wi-Fi into systems handling member data.
// results
Wireless controls held up at both locations. Findings were prioritized for the credit union's IT team with practical guidance, and the engagement gave leadership the evidence they needed to demonstrate due diligence to regulators and the board.