Hospital website
Public pages, forms and plugins checked for known and common vulnerabilities.
A security health check for DRL Hospital
A security audit of DRL Hospital’s website, staff login portal, internet-facing servers and backups, with a ranked fix plan and a retest.
OWASP Top 10CIS ControlsCERT-In guidelinesDigital Personal Data Protection Act, 2023
The challenge
Why the hospital needed an audit
Hospitals depend on their systems being available around the clock. A ransomware attack or a leaked staff password can stop admissions, billing and reporting.
DRL Hospital wanted to know how its internet-facing systems would stand up to a real attacker, and whether it could recover quickly if something went wrong.
Scope
What we audited
Every system below was tested with the hospital’s written consent and within agreed testing windows.
Staff login portal
Password policy, two-factor login, session handling and account lockout.
Internet-facing servers
Exposed services, open ports, patch levels and remote access settings.
Backups and recovery
Backup frequency, storage location and a review of the recovery process.
Approach
How the audit was carried out
A clear, safe process that never put live hospital services at risk.
- 01
Scope and consent
Systems, IP addresses and testing windows agreed in writing before testing.
- 02
Testing
External scanning and manual testing of the website and staff portal.
- 03
Reporting
Every finding rated by risk with clear, step-by-step fixes.
- 04
Retest
Fixed issues were tested again to confirm they were closed.
Standards
Tested against recognised standards
- OWASP Top 10
- CIS Controls
- CERT-In guidelines
- Digital Personal Data Protection Act, 2023
Deliverables
What the hospital received
- Executive summary for management
- Technical report with evidence
- Backup and recovery recommendations
- Retest report
Outcome
What changed for the hospital
Findings and system details stay confidential. This is the impact we can share.
Smaller attack surface
Unneeded exposed services identified so they could be closed or protected.
Better staff account safety
Clear steps to strengthen passwords and add two-factor login.
Faster recovery
Backup gaps identified so the hospital can restore systems with confidence.
More case studies
Other security audits we have delivered
Security auditHealthcare
Sonoscan Hospital
A full security audit of Sonoscan Hospital’s website, online report access and hosting server, with a ranked fix plan and a retest.
Read case studySecurity auditHealthcare
MMC Hospital
A security audit of MMC Hospital’s website, admin panel, APIs and email domain, with fixes ranked by risk and a retest.
Read case studyWant the same level of protection?
Tell us which systems you want checked. We reply within one working day with a scope and a fixed quote.
Prefer email? twenovaitc@gmail.com