Security Audit 2025 March

Exercise by GHSC - March to June 2025

GHSC conducted an independent third party security audit of OpenG2P platform. During this exercise, GHSC performed a comprehensive set of web and API penetration tests on four key applications of the OpenG2P platform - viz.

1. OpenG2P - Registry

2. OpenG2P - PBMS

3. OpenG2P - SPAR

4. OpenG2P - G2P Bridge

These technical assessments were conducted in accordance with OWASP and industry best practices to identify critical security flaws in assessing the platform’s risk posture. All four applications achieved the highest risk rating (A+), indicating an overall low risk posture in line with best practices.

The final reports of the audit are available here