Security Testing

Avalanche Studios Portfolio

Client:Avalanche Studios Group

Cyrex partnered with Avalanche Studios Group to deliver penetration testing across live services powered by the Apex engine, strengthening multiplayer security and supporting scalable infrastructure across multiple global titles.

The Challenge

Securing Live Services Across a Multi-Title Portfolio

Avalanche Studios Group, based in Stockholm, develops and publishes globally recognized titles including Just Cause, Rage 2, and Call of the Wild: The Angler. Supporting these titles is their proprietary Apex engine, which powers multiplayer and live service capabilities across multiple games.

For Avalanche, securing live services meant protecting:

Player authentication systems
Multiplayer matchmaking
Inventory and account management
Social systems including friends and clans
Third-party integrations such as Twitch

Live services represent a shared infrastructure layer across multiple titles. A vulnerability within core systems could affect player trust, platform stability, and revenue streams.

Avalanche required structured penetration testing to validate the resilience of these systems at the engine and service level.

The Cyrex Solution

Penetration Testing Across Apex Engine Live Services

Cyrex conducted comprehensive penetration testing focused on live services powered by the Apex engine.

The objective was to simulate real-world attack scenarios against critical infrastructure components and identify weaknesses before they could be exploited.

Core Live Service Security Assessment

Our engagement included testing of:

Registration and authentication workflows
User and account management systems
News management functionality
Profanity filtering mechanisms
Inventory systems
Friend and clan systems
Matchmaking services
Twitch integration

Each component was evaluated for improper validation, access control weaknesses, and potential abuse vectors.

By focusing on systems shared across multiple titles, the engagement delivered security value beyond a single game release.

Realistic Attack Simulation

Cyrex’s penetration testing approach simulated malicious activity against live services infrastructure to:

Identify exploitable vulnerabilities
Validate server-side authority enforcement
Assess integration points between engine and services
Provide prioritized remediation guidance

Findings were delivered with actionable recommendations to enable efficient mitigation within Avalanche’s development workflows.

The Outcome

Strengthened Live Services Across Multiple Titles

Identification and remediation of live service vulnerabilities
Improved protection of multiplayer systems
Strengthened authentication and account controls
Increased confidence in scalable engine-level infrastructure

Client Feedback

Avalanche Studios Group

“Cyrex has quickly become an important partner to Avalanche Studios Group. Most recently, they’ve supported our efforts to scale up the multiplayer capabilities of our Apex engine, which greatly benefits several of our live service games. The Cyrex team delivers quality, flexibility, and are a pleasure to work with.”

Avalanche Studios Group

Start Your Security Assessment