Case Study
Securing an AI-powered content management
platform with pen testing
"Grey Matter understood our needs from the outset and connected us with the right partner"
- Simon Gregory, Limeglass
Limeglass is an innovative solutions company specialising in converting complex financial content into rich semantic data, enabling powerful content discovery and highly accurate GenAI responses. Their work for leading financial institutions has created a new semantic foundation for finance, enabling more accurate, domain aware search and retrieval for Large Language Models.
The challenge
Limeglass wanted more than a tick-box security check. They needed deep assurance that their AI-powered content management platform was secure. This included APIs, web apps, chatbot functionality and infrastructure. To achieve this, they wanted in-depth external penetration testing expertise. The goal was to validate that their security protocols worked as intended and uncover hidden vulnerabilities that automated testing might miss.
As a forward-thinking business, Limeglass also wanted to make sure they were maximising their IT budget and were staying ahead of tech trends.
Our solution
We introduced Limeglass to Secure Impact, our trusted penetration testing partner.
They delivered in-depth security testing across:
- Multiple APIs handling content and data ingestion
- Web application portal
- AI chatbot functionality
- SFTP infrastructure
When it came to maximising budget and keeping on top of tech trends, we provided advice on how to optimise their licensing and invited them to attend our annual Tech Summit event and security webinar.
It's all in the results
Limeglass worked collaboratively with Secure Impact with regular communication enabling real-time validation and quick remediation of findings. This demonstrated security maturity and commitment to understanding their true risk posture.
The outcomes of the pen testing project:
- Multiple vulnerabilities fixed before assessment concluded.
- Only two informational findings remained by the end of the testing focus period.
- A significantly reduced attack surface across all tested components.
By embracing a purple team approach, Limeglass accelerated remediation and knowledge transfer - turning security testing into a learning opportunity.
Beyond testing:
We helped Limeglass consolidate and optimise their licensing to maximise their budget.
They attended our Tech Summit and learnt about the latest Microsoft, tech and security trends. This included topics on AI, deep fakes and app modernisation. And they joined our Seven Layers of Security to discover more about the evolving cyber threat landscape and additional best practices to implement.
Key takeaways
Manual testing matters
Automated tools miss context and logic flaws - especially in AI-driven applications. Human expertise fills that gap.
Live remediation speeds improvement
Fixing issues during the project reduces risk faster and demonstrates true security maturity.
Partnership is important
Treating tech and security as a shared responsibility delivers better outcomes if you’re an organisation that’s serious about protecting and optimising your platforms.
“Secure Impact’s testing was rigorous, collaborative, and genuinely valuable. It strengthened our platform and validated that the right financial grade security controls are in place.
Grey Matter understood our needs from the outset and connected us with the right partner. The whole process was efficient, smooth, and delivered precisely the outcome we were looking for.”
-Simon Gregory, Limeglass
Do you need pen testing for your organisation?
If you have any questions or want some extra information, complete the form below and one of the team will be in touch ASAP. If you have a specific use case, please let us know and we'll help you find the right solution faster.
By submitting this form you are agreeing to our Privacy Policy and Website Terms of Use.