WBP SI case studies
WBP SI · Put your knowledge to work in context.
WBP SI stands for Web-Based Platform Security Inspection. It is a professional credential for practitioners who assess the security posture of web-hosted platforms: the people who inventory internet-facing assets, review build and configuration baselines, verify whether a suspected vulnerability is genuinely exploitable, and then turn those findings into defensible evidence and a remediation plan the business will actually act on. The WBP SI case studies are 5 cases and about 4,165 words.
1Scope Creep at Hour Six: A Third-Party Range Inside the Corporate Network
You lead a six-person inspection team for a regional insurer. The signed authorization memo covers 10.20.0.0/16 and the portal at app.example-insure.test, with a 48-hour testing window.
815 words, about 4 min2344 Live Hosts Against a 280-Record CMDB
An asset inventory inspection at a payments processor compares the CMDB (280 servers) with results from a two-night unauthenticated discovery scan of 10.60.0.0/22 and 10.61.0.0/24. The scan returned 344 responsive IP addresses, 61 of which have no CMDB match.
793 words, about 4 min3CIS Level 1 at 74%: Exceptions, Compensating Controls, and a Number for the Board
A hardening review covers 180 RHEL 8 servers and 60 Windows Server 2019 members against CIS Level 1. The automated scanner reports 74% overall pass.
830 words, about 4 min4Intermittent SQLi and a Flickering Authorization Bug Behind a Blocking WAF
An authenticated web application test of a customer portal runs in production during a nightly four-hour window (01:00-05:00) under a change freeze. The WAF is in blocking mode with a 10 requests-per-second per-IP rate limit.
892 words, about 4 min5A Hash Mismatch, a Seven-Hour Clock, and One Unreproducible Critical Finding
The evidence package for a completed inspection contains 240 screenshots, 18 configuration exports, and a chain-of-custody log. Three problems surface during quality review.
835 words, about 4 min