(929) 590-5818 [email protected]
en
en

Docker Infrastructure Security Audit

Client:
HUSPI — a software development company for healthcare and financial organizations
Industry:
Software Development
Focus:
Protection of personal, medical, and corporate data within the company’s digital products
Main challenge:
Security assessment of servers in Docker containers to prevent unauthorized access and data leaks
Market:
Germany, Poland, Ukraine (international segment)
Services provided:
White-box pentest of servers, containers, and network
Key Takeaways
  • Strengthened container security posture
  • Reduced data leak risk by 80–90 percent
  • Identified 9 vulnerabilities, including 2 critical ones
  • Provided a detailed report with recommendations for strengthening the infrastructure
  • Critical vulnerabilities were eliminated within 24 hours of reporting
    • 24 hours
    to fix the vulnerability
    9
    vulnerabilities detected
    80–90%
    lower risk of data breaches
    Docker Infrastructure Security Audit
    Upd: 02.03.2026 14 min
    Do Docker containers really guarantee isolation and security? The IT company HUSPI turned to Datami for a scheduled penetration test of its internal infrastructure. We performed white-box testing of Docker servers, identified critical vulnerabilities, and helped reduce the risk of data leaks by 80–90%.

    HUSPI is a mid-sized IT company registered in Poland that develops software for the healthcare, financial, and real estate sectors. Thousands of users work with its web platforms and APIs every day.

    HUSPI operates in regulated industries and complies with international security standards (including GDPR), making the protection of personal, medical, and corporate data critically important for the company.

    Objectives and challenges
    HUSPI initiated a scheduled security assessment due to the risks of unauthorized access to internal systems and potential data leaks from the containerized environment.

    The goal of the project was to identify vulnerabilities and test the security of the internal infrastructure to ensure compliance with international security standards, including GDPR and healthcare requirements.
    • Conduct a white-box penetration test of internal servers and containers (frontend and backend).
    • Assess the isolation of Docker environments and network interactions, including the risks of container breakout.
    • Identify vulnerabilities, assess risks, and prepare a detailed report with recommendations.
    icon
    Penetration testing
    White-box testing of frontend and backend containers
    icon
    Vulnerability detection
    Identification and analysis of risks within the internal infrastructure
    icon
    Reporting and recommendations
    Detailed report on threats and security improvements
    Datami methodology: HUSPI security assessment

    Our approach

    Datami assessed HUSPI’s internal infrastructure, including frontend and backend servers in Docker containers.

    The primary method used was a white-box penetration test: the team had access to technical information for the most in-depth analysis.

    We combined manual and automated testing methods, analyzed configurations, and examined inter-container interactions. SSH access enabled work in the live environment.

    Despite a limited budget, the team identified critical vulnerabilities and provided effective recommendations.

    White-box

    White-box

    The testing was carried out with full access to the internal infrastructure, allowing the team to simulate the most likely attack vectors and obtain an objective picture of the security posture.
    Main project stages and solutions

    During the project, Datami used specific scenarios to test Docker container isolation and adapted the workflow in response to access delays.

    Analysis of the key components of the container environment enabled the team to cover priority risk areas and respond promptly to client requests.

    • Preparation:
      Analysis and clarification of technical details, test planning, and identification of critical areas for assessment.
    • Penetration testing:
      White-box pentest of two Docker servers, combining manual and automated approaches to detect vulnerabilities in network interactions and container isolation.
    • Analysis and reporting:
      Preparation of a detailed report describing the identified risks, recommendations for remediation, and measures to improve security.
    Cybersecurity starts with action
    How we can help you?

    Every cybersecurity case study we solve involves deep analysis, tailored solutions, and measurable results.
    Datami has already helped over 600 companies strengthen their digital defenses — and we can do the same for your business.
    Ready to take action?

    Let’s start with a free consultation!
    Results and recommendations

    Results and recommendations

    At the start of the project, HUSPI’s internal infrastructure faced high risks: lack of container audits and weak network segmentation posed threats to sensitive data.

    During the white-box pentest, Datami discovered 9 vulnerabilities: 2 critical (including database access via inter-container communication), 3 medium, and 4 low.

    HUSPI received clear recommendations to strengthen cybersecurity:

    1. Regular audits of Docker configurations
    2. Restriction of inter-container access
    3. Implementation of a Zero Trust approach and updated logging

    After implementing the recommendations, the risk level was reduced to medium: the likelihood of data loss due to inter-container communication decreased by 80–90%, helping to avoid over $50,000 in potential financial losses.

    The project was completed in 2 weeks instead of the standard 3–4. Critical vulnerabilities were fixed by the client within 24 hours.

    CONFIRMED EXPERTISE OF DATAMI

    Our certificates

    Datami is a cybersecurity firm whose qualifications are confirmed by 26 certifications and international standards. This allows us to perform tasks of varying complexity while complying with security, confidentiality, and ethical practice requirements.
    Key project outcomes

    With Datami’s help, HUSPI improved its cybersecurity in just 2 weeks: the company gained a clear picture of potential risks, received an actionable roadmap, and strengthened its GDPR compliance. All project objectives were achieved.

    This case proves that even companies specializing in complex digital solutions need regular penetration testing to avoid financial, legal, and reputational losses.

    Aspect
    Before the project
    After implementation
    Security status
    High risk due to lack of container audits
    Risk level reduced, 9 vulnerabilities found
    Critical vulnerabilities
    Possible unauthorized access to databases
    2 critical issues found, fixed within 24 hours
    Account compromise
    Potential due to network isolation issues
    Risk reduced after configuration improvements
    Security compliance
    Partial compliance with policies and GDPR
    Improved alignment with standards
    Timeline
    Typically 3–4 weeks
    Project completed in 2 weeks
    More success stories with Datami
    Browse other project case studies
    Cloudflare Zero Trust & SIEM for SaaS
    Cloudflare Zero Trust & SIEM for SaaS
    • MTTD reduced to 1–2 hours
    • False positives reduced by 50–65%
    Services:
    Cloudflare Zero Trust and Wazuh SIEM implementation
    Aug 4, 2026
    WordPress Website Recovery After a Hack
    WordPress Website Recovery After a Hack
    • Backdoor infections and web shells were completely removed.
    • 9 unauthorized admin accounts were removed.
    Services:
    WordPress Security Audit (White-box)
    Aug 4, 2026
    SIEM Wazuh Implementation for a Financial Company
    SIEM Wazuh Implementation for a Financial Company
    • PCI DSS & ISO 27001 audit-ready
    • Reduced false positives by 60–70%
    Services:
    SIEM Implementation (Wazuh)
    Jul 1, 2026
    Back to home page
    Security image
    Ready to assess your project's security?
    Contact Datami — we’ll help you identify risks, strengthen your cybersecurity, and confidently pass certification.
    Datami articles
    Why AI Tokens Introduce a New Class of Smart Contract Risks Oleksandr Filipov
    Oleksandr Filipov
    Why AI Tokens Introduce a New Class of Smart Contract Risks

    A smart contract can pass a Solidity audit without a remark and still be exploitable - if part of the decision-making sits with a model. What a real audit with 40 findings reveals, and what to check before listing.

    4 min Aug 4, 2026
    When AI Meets Smart Contracts: How Prompt Injection Creates a New Web3 Attack Surface Oleksandr Filipov
    Oleksandr Filipov
    When AI Meets Smart Contracts: How Prompt Injection Creates a New Web3 Attack Surface

    A smart contract can pass the most rigorous audit and the product around it can still be exposed. All it takes is an AI reading on-chain text as a command. A new class of Web3 risk, from a real Datami finding.

    3 min Aug 3, 2026
    Cybersecurity Risk Self-Assessment: 6 Gaps Fintech Companies Notice Last Oleksandr Filipov
    Oleksandr Filipov
    Cybersecurity Risk Self-Assessment: 6 Gaps Fintech Companies Notice Last

    Most companies learn about their weak spots not from their own team, but from a due diligence partner or an attacker. We explain which gaps in fintech remain unnoticed the longest and why.

    4 min Jul 27, 2026
    Show all articles
    Order a consultation
    By submitting this form, I confirm that I have read and agree to the Privacy policy
    We value your privacy
    We use cookies to enhance your browsing experience, serve personalized ads or content, and analyze our traffic. By clicking "Accept All", you consent to our use of cookies. Cookie policy