{"id":24425,"date":"2026-07-29T13:07:55","date_gmt":"2026-07-29T13:07:55","guid":{"rendered":"https:\/\/saga.rs\/?page_id=24425"},"modified":"2026-07-30T08:20:14","modified_gmt":"2026-07-30T08:20:14","slug":"penetration-test-generali","status":"publish","type":"page","link":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/","title":{"rendered":"Generali Penetration Test"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row custom_css_code=&#8221;JTJGJTJBJTIwTGlzdCUyMEl0ZW0lMjAlMkElMkYlMEEucG9zdC1icmVhZGNydW1icyUyMHVsJTIwbGklM0FudGgtY2hpbGQlMjgxJTI5JTdCJTBBJTA5cGFkZGluZy1sZWZ0JTNBMHB4JTNCJTBBJTA5JTBBJTdEJTBBJTBB&#8221;][vc_column][vc_row_inner][vc_column_inner]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b09e73 {margin-top: 100px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b09e73 {display: none;}}<\/style><div id=\"thegem-divider-6a6bd85b09e73\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0a05d1320\" ><h1 id=\"thegem-heading-6a6bd85b0a00b\" class=\"thegem-heading thegem-custom-heading-6a6bd85b09ffb9109 title-h2\" style=\"text-align: center;\" ><span>How Generali Secured Two Key Digital Applications for the Insurance Onboarding Process?<\/span><\/h1><style type=\"text\/css\">#thegem-heading-6a6bd85b0a00b {margin: 0;}#thegem-heading-6a6bd85b0a00b {margin-left: auto; margin-right: auto;}#thegem-heading-6a6bd85b0a00b > * {justify-content: center;}#thegem-heading-6a6bd85b0a00b a:hover, #thegem-heading-6a6bd85b0a00b a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b09ffb9109{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b09ffb9109{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b09ffb9109{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b09ffb9109{position: relative !important;}}<\/style><div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0a13b {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0a13b {margin-bottom: 20px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0a13b\" class=\"gem-divider  \" style=\"\" ><\/div><style>.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs {justify-content: center; text-align: center;}.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs ul {justify-content: center; text-align: center;}.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs ul li {color: #2A55A2;}.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs ul li a {color: #2A55A2;}.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs ul li a:hover {color: #56ADE4;}.thegem-te-post-breadcrumbs.thegem-custom-6a6bd85b0a1954883 .post-breadcrumbs ul li:last-child {color: #2A55A2;}<\/style><div class=\"thegem-te-post-breadcrumbs custom-breadcrumb thegem-custom-6a6bd85b0a1954883\"> <div class=\"post-breadcrumbs\"><ul><li><a href=\"https:\/\/saga.rs\/en\/\">Home<\/a><\/li><\/ul><!-- .breadcrumbs --><\/div> <\/div><div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0b25a {margin-bottom: 20px !important;}<\/style><div id=\"thegem-divider-6a6bd85b0b25a\" class=\"gem-divider  \" style=\"\" ><\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row][vc_row][vc_column][vc_row_inner][vc_column_inner width=&#8221;3\/4&#8243;][vc_single_image image=&#8221;24427&#8243; img_size=&#8221;full&#8221; css=&#8221;.vc_custom_1785333498755{padding-bottom: 10px !important;}&#8221;]<div class=\"thegem-te-heading thegem-custom-6a6bd85b0b75d144\" ><h2 id=\"thegem-heading-6a6bd85b0b5cb\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0b5c22406 title-h5 vc_custom_1785333052895\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">The Challenge<\/span><\/h2><style type=\"text\/css\">#thegem-heading-6a6bd85b0b5cb {margin: 0;}#thegem-heading-6a6bd85b0b5cb a:hover, #thegem-heading-6a6bd85b0b5cb a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0b5c22406{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0b5c22406{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0b5c22406{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0b5c22406{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]Digital insurance processes today carry the same weight as paper documentation did twenty years ago, but now they&#8217;re far more exposed. For Generali, one of the leading insurers, <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>two web applications<\/strong><\/span> supporting the insurance process represented the point where customer trust, regulatory requirements, and operational risk all meet.<\/p>\n<p>The question wasn&#8217;t whether the applications worked, it was whether they were <a href=\"https:\/\/saga.rs\/en\/cyber-security\/\">secure<\/a> enough to withstand a <em>real attack attempt<\/em>, with everything that implies: access to customer data, the business logic behind policy processing, and the integrity of communication with connected services.[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0b8de {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0b8de {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0b8de\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0bcc79244\" ><h3 id=\"thegem-heading-6a6bd85b0bc3e\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0bc366108 title-h5 vc_custom_1785333203675\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">The Process<\/span><\/h3><style type=\"text\/css\">#thegem-heading-6a6bd85b0bc3e {margin: 0;}#thegem-heading-6a6bd85b0bc3e a:hover, #thegem-heading-6a6bd85b0bc3e a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0bc366108{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0bc366108{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0bc366108{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0bc366108{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]Saga carried out a security assessment of both applications as a <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>gray-box penetration test<\/strong><\/span>, following the <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>OWASP Web Security Testing Guide (WSTG)<\/strong><\/span> methodology \u2014 the same standard used by security teams at leading financial institutions.<\/p>\n<p>Each test <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>ran for one week<\/strong><\/span> and used standard-privilege user accounts, simulating a realistic scenario: an attacker who already has some level of access, not just an external actor with no credentials at all.<\/p>\n<p>Testing combined manual and automated techniques, focusing on:[\/vc_column_text]<div class=\"gem-image gem-wrapbox gem-wrapbox-style-default gem-wrapbox-position-below mobile-infographic thegem-custom-6a6bd85b0be2a578\"  style=\"\" ><div class=\"gem-wrapbox-inner \" ><a href=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/Graf-za-Case-Study-Generali-ENG.svg\" class=\"fancybox\"><img class=\"gem-wrapbox-element img-responsive\" src=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/Graf-za-Case-Study-Generali-ENG.svg\" alt=\"\"\/><\/a><\/div><style type=\"text\/css\">.thegem-custom-6a6bd85b0be2a578.gem-image a:hover img {filter: brightness( 100% ) contrast( 100% ) saturate( 100% ) blur( 0px ) hue-rotate( 0deg );}<\/style><\/div><div class=\"gem-image gem-wrapbox gem-wrapbox-style-default gem-wrapbox-position-below desktop-infographic thegem-custom-6a6bd85b0c4557950\"  style=\"width: 100%;\" ><div class=\"gem-wrapbox-inner \" ><img class=\"gem-wrapbox-element img-responsive\" src=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/Graf-za-Case-Study-Generali-ENG.svg\" alt=\"\"\/><\/div><style type=\"text\/css\">.thegem-custom-6a6bd85b0c4557950.gem-image a:hover img {filter: brightness( 100% ) contrast( 100% ) saturate( 100% ) blur( 0px ) hue-rotate( 0deg );}<\/style><\/div><div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0c5ef {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0c5ef {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0c5ef\" class=\"gem-divider  \" style=\"\" ><\/div>[vc_column_text css=&#8221;&#8221;]Once the report was delivered, Generali implemented the recommended fixes, and Saga carried out a <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>retest<\/strong><\/span> to confirm that the identified weaknesses were genuinely resolved, not just marked as fixed.[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0c6f6 {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0c6f6 {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0c6f6\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0cac17029\" ><h3 id=\"thegem-heading-6a6bd85b0ca01\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0c9f89410 title-h5 vc_custom_1785333211373\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">The Result<\/span><\/h3><style type=\"text\/css\">#thegem-heading-6a6bd85b0ca01 {margin: 0;}#thegem-heading-6a6bd85b0ca01 a:hover, #thegem-heading-6a6bd85b0ca01 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0c9f89410{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0c9f89410{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0c9f89410{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0c9f89410{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]The retest confirmed that all identified vulnerabilities were successfully remediated, and the measures applied effectively strengthened the security of both applications. This is the key difference from a standard &#8220;test-and-done&#8221; approach: the process doesn&#8217;t end with a report \u2014 it ends with <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>proof<\/strong><\/span> that the <em>risk has actually been removed<\/em>.[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0cc1a {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0cc1a {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0cc1a\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0cf637209\" ><h3 id=\"thegem-heading-6a6bd85b0cef3\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0ceee6535 title-h5 vc_custom_1785333220620\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">Client Voice<\/span><\/h3><style type=\"text\/css\">#thegem-heading-6a6bd85b0cef3 {margin: 0;}#thegem-heading-6a6bd85b0cef3 a:hover, #thegem-heading-6a6bd85b0cef3 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0ceee6535{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0ceee6535{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0ceee6535{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0ceee6535{position: relative !important;}}<\/style><div class=\"gem-image gem-wrapbox gem-wrapbox-style-default gem-wrapbox-position-below mobile-infographic thegem-custom-6a6bd85b0d0d08656\"  style=\"\" ><div class=\"gem-wrapbox-inner \" ><a href=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/case-study-CS-Generali-ENG.jpg\" class=\"fancybox\"><img class=\"gem-wrapbox-element img-responsive\" src=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/case-study-CS-Generali-ENG.jpg\" alt=\"\"\/><\/a><\/div><style type=\"text\/css\">.thegem-custom-6a6bd85b0d0d08656.gem-image a:hover img {filter: brightness( 100% ) contrast( 100% ) saturate( 100% ) blur( 0px ) hue-rotate( 0deg );}<\/style><\/div><div class=\"gem-image gem-wrapbox gem-wrapbox-style-default gem-wrapbox-position-below desktop-infographic thegem-custom-6a6bd85b0d5834036\"  style=\"width: 100%;\" ><div class=\"gem-wrapbox-inner \" ><img class=\"gem-wrapbox-element img-responsive\" src=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/case-study-CS-Generali-ENG.jpg\" alt=\"\"\/><\/div><style type=\"text\/css\">.thegem-custom-6a6bd85b0d5834036.gem-image a:hover img {filter: brightness( 100% ) contrast( 100% ) saturate( 100% ) blur( 0px ) hue-rotate( 0deg );}<\/style><\/div>[vc_column_text css=&#8221;&#8221;]&#8221;We want to express our <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>great satisfaction<\/strong><\/span> with the collaboration during the penetration testing engagement. The team demonstrated a high level of expertise, professionalism, and commitment, with clear and timely communication. The testing conducted was <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>thorough<\/strong><\/span> and <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>systematic<\/strong><\/span>, and the delivered report was exceptionally high-quality, well-organized, and practically oriented, with clearly described vulnerabilities, risk assessment, and concrete <em>recommendations for remediation<\/em>.<\/p>\n<p>We would especially highlight the <span style=\"font-family: hkgrotesk-semi-bold;\"><strong>support<\/strong><\/span> provided during the remediation process, as well as the effectiveness of the retest, which confirmed the success of the corrective measures applied. Thanks to the professional approach and expert guidance, we improved the security level of our systems and gained additional confidence in their reliability.&#8221;<\/p>\n<p><span style=\"font-family: hkgrotesk-semi-bold;\"><strong>Dragan \u017divojinovi\u0107<\/strong><\/span>, Cyber Security Analyst, Generali[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0d799 {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0d799 {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0d799\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0dc2c8697\" ><h3 id=\"thegem-heading-6a6bd85b0db92\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0db7a5034 title-h5 vc_custom_1785333225893\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">From the Perspective of the Team That Conducted the Test<\/span><\/h3><style type=\"text\/css\">#thegem-heading-6a6bd85b0db92 {margin: 0;}#thegem-heading-6a6bd85b0db92 a:hover, #thegem-heading-6a6bd85b0db92 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0db7a5034{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0db7a5034{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0db7a5034{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0db7a5034{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]&#8221;The testing was conducted as a gray-box security assessment, using standard-privilege user accounts and in line with OWASP WSTG guidelines. Special focus was placed on analyzing application functionality, communication between the application and connected services, as well as reviewing authentication, authorization, session management, and business logic mechanisms.&#8221;<\/p>\n<p><span style=\"font-family: hkgrotesk-semi-bold;\"><strong>Vanja Topalovi\u0107<\/strong><\/span>, Saga[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0dd4a {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0dd4a {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0dd4a\" class=\"gem-divider  \" style=\"\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0e0a62334\" ><h3 id=\"thegem-heading-6a6bd85b0e009\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0e0049771 title-h5 vc_custom_1785333235377\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">What&#039;s Next<\/span><\/h3><style type=\"text\/css\">#thegem-heading-6a6bd85b0e009 {margin: 0;}#thegem-heading-6a6bd85b0e009 a:hover, #thegem-heading-6a6bd85b0e009 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e0049771{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e0049771{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e0049771{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e0049771{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]For Generali, this engagement wasn&#8217;t a one-time check but part of a long-term approach to securing digital insurance processes \u2014 with a retest cycle that ensures every corrective measure is not only applied, but confirmed.[\/vc_column_text]<div class=\"thegem-te-heading thegem-custom-6a6bd85b0e4091970\" ><h4 id=\"thegem-heading-6a6bd85b0e3a5\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0e3a11344 title-h5 vc_custom_1785333285420\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">Schedule a security assessment of your IT environment.<\/span><\/h4><style type=\"text\/css\">#thegem-heading-6a6bd85b0e3a5 {margin: 0;}#thegem-heading-6a6bd85b0e3a5 a:hover, #thegem-heading-6a6bd85b0e3a5 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e3a11344{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e3a11344{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e3a11344{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e3a11344{position: relative !important;}}<\/style>[\/vc_column_inner][vc_column_inner width=&#8221;1\/4&#8243; el_sticky=&#8221;1&#8243; el_sticky_offset=&#8221;130px&#8221;]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0e4fc {margin-bottom: 20px !important;}<\/style><div id=\"thegem-divider-6a6bd85b0e4fc\" class=\"gem-divider  \" style=\"border-width: 1px;width: 50px;border-color: #2A55A2;\" ><\/div><div class=\"thegem-te-heading thegem-custom-6a6bd85b0e7715305\" ><div id=\"thegem-heading-6a6bd85b0e716\" class=\"thegem-heading thegem-custom-heading-6a6bd85b0e7144959 title-h6 vc_custom_1785333479994\" style=\"text-align: left;\" ><span class=\"colored\" style=\"color: #2A55A2;\">Client: Generali<\/span><\/div><style type=\"text\/css\">#thegem-heading-6a6bd85b0e716 {margin: 0;}#thegem-heading-6a6bd85b0e716 {font-size: 18px;}#thegem-heading-6a6bd85b0e716, #thegem-heading-6a6bd85b0e716 .light {text-transform: none;}#thegem-heading-6a6bd85b0e716 a:hover, #thegem-heading-6a6bd85b0e716 a:hover span.colored {color: var(--thegem-to-menu-level1-color-hover, #00BCD4) !important;}<\/style><\/div><style>@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e7144959{display: block!important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e7144959{display: block!important;}}@media screen and (max-width: 1023px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e7144959{position: relative !important;}}@media screen and (max-width: 767px) {.thegem-heading.thegem-custom-heading-6a6bd85b0e7144959{position: relative !important;}}<\/style>[vc_column_text css=&#8221;&#8221;]Topic: Penetration Test<\/p>\n<p>Portfolio: Cyber Security<\/p>\n<p>Reading time: 3 min[\/vc_column_text]<div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0e83d {margin-bottom: 50px !important;}<\/style><div id=\"thegem-divider-6a6bd85b0e83d\" class=\"gem-divider  \" style=\"\" ><\/div>[\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1750689350076{margin-top: -80px !important;}&#8221;][vc_column]<style type=\"text\/css\">.thegem-button-6a6bd85b0ea532346 .gem-button {font-size: 16px;margin-top: 5px;margin-bottom: 5px;}.thegem-button-6a6bd85b0ea532346 .gem-button-text {font-size: 16px;margin-top: 5px;margin-bottom: 5px;}.thegem-button-6a6bd85b0ea532346 .gem-button svg {fill: #FFFFFF;}.thegem-button-6a6bd85b0ea532346 .gem-button:hover svg {fill: #FFFFFF;}<\/style><div class=\"gem-button-container gem-button-position-inline thegem-button-6a6bd85b0ea532346    \"  ><a title=\"Kontakt\" class=\"gem-button gem-button-size-medium gem-button-style-flat gem-button-text-weight-normal gem-button-icon-position-right\" data-ll-effect=\"drop-right-without-wrap\" style=\"border-radius: 4px;background-color: #56ADE4;color: #FFFFFF;\" onmouseleave=\"this.style.backgroundColor='#56ADE4';this.style.color='#FFFFFF';\" onmouseenter=\"this.style.backgroundColor='#2A55A2';this.style.color='#FFFFFF';\" href=\"https:\/\/saga.rs\/kontakt\/\" target=\"_self\">Contact us<i class=\"gem-print-icon gem-icon-pack-elegant \">&#x39;<\/i><\/a><\/div> <div class=\"clearboth\"><\/div><style>#thegem-divider-6a6bd85b0eb38 {margin-bottom: 40px !important;}@media screen and (max-width: 767px) {#thegem-divider-6a6bd85b0eb38 {margin-bottom: 10px !important;}}<\/style><div id=\"thegem-divider-6a6bd85b0eb38\" class=\"gem-divider  \" style=\"\" ><\/div>[\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row custom_css_code=&#8221;JTJGJTJBJTIwTGlzdCUyMEl0ZW0lMjAlMkElMkYlMEEucG9zdC1icmVhZGNydW1icyUyMHVsJTIwbGklM0FudGgtY2hpbGQlMjgxJTI5JTdCJTBBJTA5cGFkZGluZy1sZWZ0JTNBMHB4JTNCJTBBJTA5JTBBJTdEJTBBJTBB&#8221;][vc_column][vc_row_inner][vc_column_inner][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row][vc_column][\/vc_column][\/vc_row][vc_row][vc_column][vc_row_inner][vc_column_inner width=&#8221;3\/4&#8243;][vc_single_image image=&#8221;24427&#8243; img_size=&#8221;full&#8221; css=&#8221;.vc_custom_1785333498755{padding-bottom: 10px !important;}&#8221;][vc_column_text css=&#8221;&#8221;]Digital insurance&#8230;<\/p>\n","protected":false},"author":9,"featured_media":24426,"parent":20291,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-24425","page","type-page","status-publish","has-post-thumbnail"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Penetration Test for Generali \u2014 Case Study | Saga<\/title>\n<meta name=\"description\" content=\"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Penetration Test for Generali \u2014 Case Study | Saga\" \/>\n<meta property=\"og:description\" content=\"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/\" \/>\n<meta property=\"og:site_name\" content=\"Saga\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/sagabgd\/?locale=sr_RS\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-30T08:20:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/CaseStudy-Penetration-Test-Generali-CS___.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"818\" \/>\n\t<meta property=\"og:image:height\" content=\"450\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/\",\"url\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/\",\"name\":\"Penetration Test for Generali \u2014 Case Study | Saga\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/saga.rs\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CaseStudy-Penetration-Test-Generali-CS___.jpg\",\"datePublished\":\"2026-07-29T13:07:55+00:00\",\"dateModified\":\"2026-07-30T08:20:14+00:00\",\"description\":\"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/#primaryimage\",\"url\":\"https:\\\/\\\/saga.rs\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CaseStudy-Penetration-Test-Generali-CS___.jpg\",\"contentUrl\":\"https:\\\/\\\/saga.rs\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/CaseStudy-Penetration-Test-Generali-CS___.jpg\",\"width\":818,\"height\":450,\"caption\":\"Penetraciono testiranje web aplikacija u finansijskom sektoru\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/penetration-test-generali\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/saga.rs\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Case Study\",\"item\":\"https:\\\/\\\/saga.rs\\\/en\\\/case-study\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Generali Penetration Test\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/saga.rs\\\/#website\",\"url\":\"https:\\\/\\\/saga.rs\\\/\",\"name\":\"Saga\",\"description\":\"A Noventiq Company\",\"publisher\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/saga.rs\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/saga.rs\\\/#organization\",\"name\":\"Saga A Noventiq Company\",\"url\":\"https:\\\/\\\/saga.rs\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/saga.rs\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/saga.rs\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Saga-35-color-.png\",\"contentUrl\":\"https:\\\/\\\/saga.rs\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Saga-35-color-.png\",\"width\":1596,\"height\":450,\"caption\":\"Saga A Noventiq Company\"},\"image\":{\"@id\":\"https:\\\/\\\/saga.rs\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/sagabgd\\\/?locale=sr_RS\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/saga-bg\\\/?originalSubdomain=rs\",\"https:\\\/\\\/www.instagram.com\\\/saga_beograd\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@SagaBeograd\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Penetration Test for Generali \u2014 Case Study | Saga","description":"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/","og_locale":"en_US","og_type":"article","og_title":"Penetration Test for Generali \u2014 Case Study | Saga","og_description":"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.","og_url":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/","og_site_name":"Saga","article_publisher":"https:\/\/www.facebook.com\/sagabgd\/?locale=sr_RS","article_modified_time":"2026-07-30T08:20:14+00:00","og_image":[{"width":818,"height":450,"url":"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/CaseStudy-Penetration-Test-Generali-CS___.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/","url":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/","name":"Penetration Test for Generali \u2014 Case Study | Saga","isPartOf":{"@id":"https:\/\/saga.rs\/#website"},"primaryImageOfPage":{"@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/#primaryimage"},"image":{"@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/#primaryimage"},"thumbnailUrl":"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/CaseStudy-Penetration-Test-Generali-CS___.jpg","datePublished":"2026-07-29T13:07:55+00:00","dateModified":"2026-07-30T08:20:14+00:00","description":"How Saga conducted gray-box penetration testing for two Generali web applications in accordance with the OWASP WSTG standard.","breadcrumb":{"@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/#primaryimage","url":"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/CaseStudy-Penetration-Test-Generali-CS___.jpg","contentUrl":"https:\/\/saga.rs\/wp-content\/uploads\/2026\/07\/CaseStudy-Penetration-Test-Generali-CS___.jpg","width":818,"height":450,"caption":"Penetraciono testiranje web aplikacija u finansijskom sektoru"},{"@type":"BreadcrumbList","@id":"https:\/\/saga.rs\/en\/case-study\/penetration-test-generali\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/saga.rs\/en\/"},{"@type":"ListItem","position":2,"name":"Case Study","item":"https:\/\/saga.rs\/en\/case-study\/"},{"@type":"ListItem","position":3,"name":"Generali Penetration Test"}]},{"@type":"WebSite","@id":"https:\/\/saga.rs\/#website","url":"https:\/\/saga.rs\/","name":"Saga","description":"A Noventiq Company","publisher":{"@id":"https:\/\/saga.rs\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/saga.rs\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/saga.rs\/#organization","name":"Saga A Noventiq Company","url":"https:\/\/saga.rs\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/saga.rs\/#\/schema\/logo\/image\/","url":"https:\/\/saga.rs\/wp-content\/uploads\/2025\/06\/Saga-35-color-.png","contentUrl":"https:\/\/saga.rs\/wp-content\/uploads\/2025\/06\/Saga-35-color-.png","width":1596,"height":450,"caption":"Saga A Noventiq Company"},"image":{"@id":"https:\/\/saga.rs\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/sagabgd\/?locale=sr_RS","https:\/\/www.linkedin.com\/company\/saga-bg\/?originalSubdomain=rs","https:\/\/www.instagram.com\/saga_beograd\/","https:\/\/www.youtube.com\/@SagaBeograd"]}]}},"_links":{"self":[{"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/pages\/24425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/comments?post=24425"}],"version-history":[{"count":6,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/pages\/24425\/revisions"}],"predecessor-version":[{"id":24481,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/pages\/24425\/revisions\/24481"}],"up":[{"embeddable":true,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/pages\/20291"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/media\/24426"}],"wp:attachment":[{"href":"https:\/\/saga.rs\/en\/wp-json\/wp\/v2\/media?parent=24425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}