CyberNX conducted a comprehensive VAPT programme across 50+ applications and APIs for a prominent financial services organization. The assessment focused on API security, business logic, authorization, network segmentation, and third-party integrations. Manual validation helped confirm exploitability and uncover vulnerabilities that automated tools could miss, including a critical BOLA issue.