Back to Portfolio
Web Security2024
NovaCare Medical — Penetration Testing & Bot Defence
White-box penetration testing and ML-based bot protection deployment for NovaCare Medical's patient-facing appointment portal — ensuring HIPAA compliance and protecting patient booking data from scrapers.
NovaCare Medical
Alexandria, Egypt
8 weeks
Results & Impact
18K
Lines of Code Audited
99.4%
Bot Detection Accuracy
HIPAA
Compliance Achieved
100%
Critical Vulns Closed
⚡
The Challenge
NovaCare's appointment portal was being scraped by bots inflating slot availability, while a white-box audit had never been performed — leaving unknown code-level vulnerabilities in a HIPAA-sensitive system.
💡
Our Solution
Full white-box penetration test of 18,000 lines of source code, HIPAA gap analysis with remediation roadmap, ML-powered bot detection distinguishing real patients from scrapers with 99.4% accuracy — all without disrupting live bookings.
Tech & Tools Used
Burp Suite ProOWASP ZAPDatadomePython MLHIPAA Framework
#Penetration Testing#Bot Protection#Healthcare#HIPAA
