From Check-the-Box Testing to Real Visibility

How A Municipal Organization Strengthened Confidence in Its Cybersecurity Operations

The City of Centennial is responsible for maintaining secure network connections that support city employees and day-to-day operations. For the IT team leading cybersecurity planning and management, understanding real risk—not just documented vulnerabilities—was critical. 

Before working with Point Solutions Security (PSS), the city had experience with other cybersecurity firms whose penetration tests amounted to little more than vulnerability scans paired with lengthy reports. While detailed, those engagements didn’t provide a true assessment of the city’s environment or the confidence that real threats were being fully understood. 

In search of a more meaningful evaluation, the city partnered with PSS in September 2025. What stood out immediately was the team’s depth of cybersecurity expertise, technical leadership, and understanding of the threats facing a municipal environment. 

Understanding Real Risk in a Municipal Environment

To better understand its environment beyond surface-level findings, the city engaged Point Solutions Security to lead internal and external penetration testing focused on the actual risks they faced, rather than just what was necessary to check off compliance.  

The city’s team worked closely with PSS, grateful for clear communication and live updates that always let them know what was being tested and why. 

Findings were translated into plain language, helping the city’s team understand not only where vulnerabilities existed but also the practical risks each posed to city operations. 

Stronger Protections and Greater Operational Confidence

As a result of the partnership, the city identified vulnerabilities it hadn’t previously recognized, implemented stronger protections, and streamlined its security processes. 

Most importantly, the IT team gained greater confidence in its cybersecurity operations. With fewer blind spots to worry about, they were able to focus more on core initiatives while knowing critical systems were better protected. 

Today, the City of Centennial views PSS as a long-term partner and looks forward to working together on future cybersecurity projects. 

“PSS delivered the best, most thorough, and most effective pen test our city has ever completed. Their team was easy to work with and provided clear communication and live updates throughout the entire process.” 

Dark Web Monitoring: Tracks stolen data and threats on the dark web for proactive mitigation.

3rd Party Risk Review: Assesses security risks posed by vendors and partners.

PCI DSS Scan: Evaluates compliance with Payment Card Industry Data Security Standards.

Vulnerability Scan: Automated scan identifying weaknesses in systems, software, and configurations.

Phishing Simulations: Mock phishing attacks to assess employee susceptibility and improve detection of malicious emails.

Penetration Testing: Simulated attacks to identify and exploit vulnerabilities in systems before malicious actors can.

Security Awareness Training: Educates employees on recognizing and avoiding cyber threats through interactive lessons and real-world scenarios.