The challenge
ATGL World is the single entry point to ATGL's GIS applications. It had been built on web libraries that had not been updated for years, and a VAPT audit by ATGL's security team flagged security vulnerabilities in the portal, including publicly disclosed issues in third-party web components.
- Every vulnerability had to be closed, and ATGL's own team had to confirm it.
- The portal's architecture, plugins and user workflows had to stay exactly as they were.
- The portal is in daily use, so users could not lose access during working hours.
The solution
Instead of rebuilding the portal, MapGeoid chose a targeted, low-risk fix. We reviewed the full codebase first and issued a code review report. Then we fixed the issues on ATGL's development server, and moved them to production only after ATGL's security team had re-scanned and cleared them.
Security vulnerabilities closed
The outdated, vulnerable components were upgraded to their latest stable, secure releases. This cleared every CVE in the audit report, and the existing plugins kept working.
Interface modernised
Typography, spacing, buttons, the login card and the background were brought up to current HTML5 and CSS3 standards.
Layout fixed on every screen
We found the elements that caused an unwanted horizontal scroll and rebuilt the layout in responsive Flexbox, so the page now fits any device.
Broken asset repaired
A wrong favicon path was returning a 404 error on every page load. With the path corrected, the application icon displays again.
How we delivered it
Code review
Full review of the portal codebase, with a summary report of the issues found.
Fix on development
All four issues fixed and deployed to ATGL's development server.
Independent validation
ATGL's VAPT team re-scanned the development server and confirmed the flagged vulnerabilities were no longer detected.
Production · July 2026
Deployed to production overnight, outside working hours, and followed by a post-deployment sanity check.
The outcome
4 of 4
issues resolved
Zero
flagged CVEs remaining
Clean
VAPT re-scan
Zero
downtime for users
The ATGL World portal is now live, secure and visibly modernised. ATGL's field and enterprise teams use it exactly as before, and its security standing has been confirmed by ATGL's own VAPT team rather than taken on our word.
Has a security audit flagged your GIS portal?
We fix what the audit found without rebuilding what already works. Talk to us about your VAPT report.