Charities can also become targets of cybercriminals. As part of our commitment to social responsibility, we want to help them strengthen their cyber resilience. That’s why we launched Hacking for Charity. During our first edition, ten ethical hackers assessed CliniClowns’ new website free of charge.
Charities prefer to spend most of their budgets on their social mission, which means extensive security testing isn't always an option. With Hacking for Charity, we want to change that. At the same time, the initiative gives our ethical hackers the opportunity to collaborate, share knowledge and use their expertise to support a good cause.
CliniClowns wanted to know how secure their new website was. Visitors can make donations and share personal information through the website. That's why it's important to ensure that their data and the donation process are properly secured.
Led by a lead hacker, the team tested contact forms and payment options, among other features, for vulnerabilities covered by the OWASP Top 10, an internationally recognised list of major security risks for web applications. They also investigated how an attacker could exploit potential vulnerabilities and what they could achieve. Afterwards, CliniClowns received a report detailing the findings, a risk classification for each vulnerability and concrete recommendations for remediation.
For over 30 years, CliniClowns has been committed to seeing the person behind the patient. Working closely with healthcare professionals, the clowns bring play, humour and personal connection to children with illnesses or disabilities and people living with dementia. They create moments when illness and worries can fade into the background, even if only for a little while.
CliniClowns also explores digital ways to reach people. During the COVID-19 pandemic, the clowns could no longer visit children in hospitals in person. CliniClowns therefore expanded its online entertainment, with the clowns adapting their performances and improvisation to a digital environment.
CliniClowns also uses data and technology to gain insights into fundraising and plan the deployment of its clowns. As a result, cyber resilience has become increasingly important for the organisation.
According to Marinus Witbraad, IT Strategist at CliniClowns, charities benefit greatly when cybersecurity experts offer their expertise free of charge:
“I think it's a fantastic initiative, especially for charities with limited budgets. Having the opportunity to get experts to review your security free of charge, offering guidance and advice on what could be improved, is incredibly valuable.”
He also emphasises the importance of independent security assessments:
“We can assess our own work, but we also believe it's very important to have independent security tests carried out.”
Our collaboration with CliniClowns shows how we can use our expertise to support organisations that dedicate themselves to helping others every day. The enthusiasm of our hackers and the positive response from CliniClowns motivate us to continue Hacking for Charity.
Would you like your charity to participate in a future edition free of charge? Get in touch and tell us more about your organisation's social mission.