Overview

Protas is a progressive health research organisation using Cantata, a clinical trial management platform built entirely on Salesforce. With fast-moving development cycles and a customer-facing UAT process, Protas needed to embed intelligent, continuous security testing into their release pipeline, without slowing down delivery or disrupting their product teams.

The Challenge

Protas runs two-week sprints followed by a two-week UAT cycle, where external stakeholders perform critical testing. Security needed to fit seamlessly into this window, delivering fast, actionable results.

With Cantata built on Salesforce's proprietary tech, Apex and Lightning Web Components, Protas needed a partner experienced in Salesforce's unique security model, from SOQL injection risks to object and field-level access controls.

Approach with Cytix

Cytix integrated at the start of each UAT cycle, scanning Jira tickets to identify security-relevant changes and auto-generate tailored threat models and tests. Testing kicked off within days and typically finished in a week, allowing time for fixes, retests, and stakeholder sign-off.

By integrating Cytix, Protas moved from traditional, point-in-time penetration testing to an embedded, sprint-aligned testing model.

What the Team Says

Conclusion

Cytix enabled their team to focus on what mattered most, ensured every change was reviewed with relevant context, and helped catch issues early, all while supporting the unique needs of a Salesforce-built platform.

Cytix continues to be a valued extension of the Protas security and engineering team, helping to ensure secure, high-quality releases without compromise.