Agentic Dashboard
← All case studies

Regional news publishing (security)

A public database dump found on day one, and the login attacks that followed

Weekly non-destructive security sweeps on two live WordPress sites. The first one found the site's full database available for download; later ones caught a distributed password-guessing campaign that no rate limit would have stopped.

105 MB
database export found public and removed within the hour
weekly
sweep on production, non-destructive
4
header and enumeration findings fixed by proposal

The problem

The sites had never been audited. The previous host left a nightly database export in a public folder. User names were listed by the site's own API. Login attempts came from hundreds of addresses, slowly enough to stay under every per-address limit.

What the team did

Every week the Engineer runs the same checklist on production without touching it: exposed files, user enumeration, security headers, plugin vulnerabilities against a vulnerability database, certificate and email authentication. Injection tests run only against a staging copy.

Findings become proposals with the exact change and a rollback. The public dump was removed the same hour with a rule that denies every sensitive path. For the login campaign the Engineer showed why a per-address limit could not work and proposed the two options that would, with the trade-offs, so the owner could decide.

AI employees involved

  • Engineer
  • Meister · Operations & Reliability Manager
  • Clara · Client Relationship Manager
  • EEngineer
  • Meister
  • Clara

Accounts connected

  • WPScan
  • AWS (IAM user)
  • Slack

Connected by the client with their own login; access is read-only unless a person approves a specific action.

Want this for your business?

Swiss Commerce sets the team up for each client personally and invites your people when it is ready.

Talk to Swiss Commerce

More case studies