POSBADA Core API

Independently assessed & verified by NexusVoid.

Assessment result · Passed

No Critical, High, or Medium-severity vulnerabilities were identified in the assessed scope.

0 Critical0 High0 Medium

Overview

This page certifies that POSBADA Core API engaged NexusVoid to perform a Vulnerability Assessment & Penetration Test against the scope below, following industry-standard methodology. Every finding is validated with reproducible evidence before it is reported.

We publish this attestation so customers, partners, and auditors can independently confirm the result. Its authenticity is verifiable via the Verification ID.

Standards

OWASP API Security Top 10 (2023)

OWASP Web Top 10 (2021)

MITRE ATT&CK

CWE

CVSS v3.1

Assessment coverage

Injection & input validation

Authentication & sessions

Access control & IDOR

Security misconfiguration

Sensitive data exposure

TLS & cryptography

SSRF & business logic

Infrastructure & open ports

Compliance frameworks

The full VAPT report maps every finding to controls across these frameworks, so the assessment doubles as audit evidence.

SOC 2ISO 27001PCI DSSGDPRHIPAA

Attestation details

Scope

POSBADA Core API (https://posbada.com/api/v1). Tenant isolation verified across knownsense.posbada.com and demo.posbada.com, both directions. All 97 documented operations; grey-box owner + cashier.

Targets

https://posbada.com/api/v1 (primary), knownsense.posbada.com (tenant), demo.posbada.com (tenant)

Assessment date

October 15, 2026 · Re-test verified October 16, 2026

Valid through

October 16, 2027

Issuer

NexusVoid VAPT Platform

Verification ID

NV-POSBADA-20261015

Get your own VAPT

Point-in-time assessment of the stated scope as of the assessment date. Does not guarantee the absence of all vulnerabilities, nor the security of systems outside the stated scope. Residual Low/Informational observations, where present, are tracked separately with the client. Authenticity is verifiable via the Verification ID at /trust/verify/NV-POSBADA-20261015.