Illustrative exampleService Trades / Locksmiths

A locksmith's key-code file, finally locked as well as the doors

Master-key charts for office buildings sat in a database anyone on the internet could reach in twenty minutes. A scoped penetration test found the way in, and monthly scans keep it shut.

This shows the kind of work we do. It is not a client engagement, and the business in it is invented.

Where it started

The problem

A locksmith keeps a strange kind of record. Master-key charts for office buildings, say, or the bitting for one customer's front door. Whoever holds that file can cut a key without ever seeing the lock.

This shop kept it in a desktop database on the counter PC, shared over the network so the van laptops could reach it. The share had no password. A previous IT helper had also forwarded a port so the owner could open it from home.

What changed

What we did

We started with a penetration test, scoped and signed before we touched anything. From outside, we reached the database in under twenty minutes, through that forwarded port.

Fixing it was mostly removal. The forward came out and the share went away. The database moved to a small server with encrypted storage, and the vans reach it over a VPN with credentials of their own.

The master-key charts got an extra lock on top. Opening one is logged, and the owner gets a weekly list of who looked at what.

Now we scan the network monthly and send a short report. Most months it says nothing's changed, which is the report you want.

Built with

  • WireGuard
  • Tenable Nessus
  • Synology
  • FortiGate

Services in this job

More on locksmiths

Got a job like this one?

Tell us what's slow, fragile or stuck.

We'll tell you whether it's work we should be doing and what it would involve. Every quote is written for the job in front of us.

Talk to usMore work
  • What we arePlan, create, launch, maintain
  • What we areSentrello Premier Partner
  • What we areEvery quote written for you