Security is an essential part of a reliable learning platform. Maisteri LMS underwent independent penetration testing, where the security of the platform was assessed through practical attack scenarios. The testing was carried out by Prove Expertise, a software testing and cybersecurity company founded in 2006.
Prove conducted an intensive five-day security assessment for Mediamaisteri to identify the types of vulnerabilities a skilled attacker might be able to find in the system. The testing focused on web application security and was based, among other things, on the OWASP Top 10 security risks.
The testing identified six security findings in total. No critical vulnerabilities were discovered. One finding was classified as high severity, two as medium severity, two as low severity, and one as informational.
Based on the findings, the necessary remediation measures were carried out, after which Prove conducted a separate verification testing round. The retesting confirmed that the most severe findings had been properly remediated.
One low-severity finding and one informational finding remain open. Addressing these depends on the underlying Moodle platform and cannot currently be resolved through actions taken by Mediamaisteri. The remaining findings do not affect the operation of the learning platform.
Security is assessed and continuously improved
According to Prove’s final assessment, Mediamaisteri’s overall security posture is very good. The report also highlights the strong security baseline provided by Moodle, which Maisteri LMS is built on, as well as the fact that essential security measures have been taken into account and implemented.
Strong security requires continuous maintenance and testing. We will therefore continue to have our security assessed regularly by external experts, with the next testing round planned for early 2027.
