BaladAPP is the leading event-management app in Brazil. Organisers use it to sell tickets and manage access. Consumers use it to discover events and pay for them. The product's growth depends on one thing: trust. Nobody enters their credit card into an app that just got breached.
The challenge: no prior testing, rising attacks, sensitive data
When Wagner, BaladAPP's CTO, reached out to Ethiack, he had a clear picture of the problem and limited illusions about the solution.
Brazil was seeing more than 100 billion cyberattacks a year, with double-digit increases. BaladAPP had never run external security testing. Personal data, including names, emails, and payment information, was flowing through their stack at scale. He was sceptical of traditional pentests, which he saw as checklist exercises with little creative input, and he didn't have the budget to keep specialised security staff in-house full time.
He needed validation of what attackers could actually exploit, and an approach that combined the breadth of automation with the creativity of real human hackers.
Continuous AI pentesting, on-demand human depth
BaladAPP deployed Hackian to test its attack surface continuously. Every finding came with reproducible attack steps, so the development team could remediate fast and learn how to write more secure code with each release. Two high-impact exploitable risks were validated and mitigated across 50 assets in the first phase alone.
Then BaladAPP layered in on-demand events with Ethiack's elite ethical hackers, bringing world-class human creativity to bear on the highest-stakes scenarios, especially around big releases.
The proficiency of the hackers assigned to meet our demands is certainly what motivates us most to continue.
For Wagner, the on-demand model was the financial unlock: enterprise-grade offensive security without enterprise-grade headcount. Continuous Hackian coverage gave him peace at 3 AM. Elite Ethical Hackers gave him confidence at every major release.
BaladAPP's market leadership was already real. Now it has a security posture that matches it.
Leading a market and need security to match? Start a 30-day trial →
Don’t wait for the attack.
Secure Your Future with Ethiack
If you're still unsure convince yourself with a 30-day free trial. No obligation. Just testing.