Telco Use Case — 5G Core, Tested Before a Single Subscriber Moved
Challenge: A carrier rolling 5G SA — cloud-native core (CNF on Kubernetes). Fear: container escape from CNF to host, then to subscriber data. No outage allowed.
Solution — Snipeyes Telco Pen-Test (OT-aware):
- External + internal + cloud — scoped to CNF, not generic IT
- Manual container escape + misconfig — found over-privileged service account in 5 hours
- Cloud CIS benchmark + segmentation review — staging, not prod
Outcome:
- Escaped path closed, retest passed — rollout on time
- Hardening baseline for next CNF version
- Now continuous: Auto PenTest per CNF release
Engineer note: “You didn’t ask for a maintenance window — and didn’t need one.”