Exfiltra

BACKGROUND

Introduce your business and what you do there.

I’m the SRE infrastructure manager at Tune, an affiliate marketing platform that gives advertisers full control over their partnerships, data, and workflows. We enable brands to build and manage customized affiliate programs with reliable technology and support.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We hired Exfiltra to perform annual penetration testing of our platform to give us an outside perspective on the security posture of our customer-facing software systems.

SOLUTION

What was the scope of their involvement?

The objective of the engagement was to test the Tune platform for security vulnerabilities based on a variety of industry-standard approaches and techniques that test external and internal threat scenarios that resemble customers and affiliates interacting with the platform. Exfiltra provided a comprehensive and actionable report of findings. The report covered approach and methodologies, detailed documentation on the individual findings with recommendations for resolution and mitigation of risk.

What is the team composition?

We worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

We found them through a referral. We chose them because their pricing fit our budget, they had a great culture fit, they offered good value for the cost, and their company values aligned with ours.

What is the status of this engagement?

We worked together from July to September 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra found valid security vulnerabilities of various severities after performing thorough and comprehensive tests that were based on context and scenarios from business processes performed on the platform. The findings were accurate, well-documented, and presented in a way that made them easy to consume as input for remediation and mitigation efforts, increasing the effectiveness of our security efforts.

They discovered one critical vulnerability and multiple items of lower severity. The experience of this successful collaboration between our security staff and Exfiltra highlighted the value of ongoing collaboration with a strong external partner. Frequent communication, sharing context, and providing ongoing feedback improved the process and outcomes.

Although the project just finished and the long-term impact is yet to be seen, the report and the low number of findings immediately increased our confidence in our efforts. The learnings during the process from the collaboration will lead to changes in how we go about discovery and reconnaissance. Exfiltra has established themselves as a trusted partner we will continue working with, be that in recurring efforts similar to this one or in projects where they would take on a consulting role.

How did Exfiltra perform from a project management standpoint?

The project management was excellent. Timely and frequent communication via email and messages ensured continuous progress and efficiency and provided clarity of the process and transparency.

What did you find most impressive about them?

The collaboration between Exfiltra and our security staff was extremely effective. It was driven by mutual understanding and flexibility. They asked the right questions and suggested next steps during any phase of the effort (initial negotiation, planning, preparation, execution, and follow-up).

Are there any areas they could improve?

No, there was nothing I could come up with.

BACKGROUND

Introduce your business and what you do there.

I am the Director at an information technology company that provides affordable, continuous penetration testing and tailored cybersecurity solutions. We combine advanced automation with expert human insight to help organisations protect their people, data, and reputation.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed a trusted, highly competent, certified technical expert partner to handle a range of overflow cyber risk management services. The goal was to reduce our internal team workload, improve quality, and build resilience in our service delivery capabilities.

SOLUTION

What was the scope of their involvement?

Exfiltra provided penetration testing and related remediation services across networks, web apps, APIs, and mobile apps.

How did you find Exfiltra?

Research.

Why did you choose Exfiltra over other options you considered?

We selected Exfiltra because their company values aligned with ours.

What is the status of this engagement?

The project began in October 2024 and is ongoing.

How many teammates from Exfiltra were assigned to your project?

2-5 people from Exfiltra were assigned to the project.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We saw timely completion of project milestones and meaningful communication throughout the process. Exfiltra demonstrated flexibility and a can-do attitude, handling complex tasks across penetration testing and related remediations professionally and according to the agreed scope. They often exceeded expectations and consistently displayed trustworthiness and a focus on doing the job right. While there were quantifiable improvements, I am unable to share specific metrics.

What was your primary form of communication with Exfiltra?

Email & Teams

How did Exfiltra perform from a project management standpoint?

Exfiltra is ethical, professional, and knowledgeable, and delivered on time.

What did you find most impressive about them?

The most impressive aspect was their caring attitude.

Are there any areas they could improve?

They could expand their vocabulary during written mid-project updates to improve clarity.

BACKGROUND

Introduce your business and what you do there.

I’m the director of product and operations at Integral. We offer a user-friendly HR platform that automates time, attendance, payroll, and core HR tasks, empowering businesses to boost efficiency, employee satisfaction, and data security with scalable, integrated solutions.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Exfiltra has done black box and gray box penetration testing. They’ve provided us with a detailed report and certification related to their tests. The team has also helped us address many issues related to penetration testing and security.

What is the team composition?

We’ve worked with 2–5 members of Exfiltra’s team.

How did you come to work with Exfiltra?

We found them through an online search. We chose them over other options because they had high ratings, their pricing fit our budget, they had a great culture fit, and their company values aligned with ours.

What is the status of this engagement?

We started working together in January-March 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra has done real scenario testing, and many issues have been solved. We’ve also retested the platform, and the tests have confirmed that some issues have been solved.

How did Exfiltra perform from a project management standpoint?

Exfiltra has delivered on time. We’ve communicated through virtual meetings.

What did you find most impressive about them?

Exfiltra is passionate about their work, professional, and expert.

Are there any areas they could improve?

No, everything has been perfect.

BACKGROUND

Introduce your business and what you do there.

Ours is a cybersecurity, risk, and compliance firm that helps SaaS, tech, and AI companies implement frameworks like ISO 27001 and SOC 2 to reduce risk, achieve compliance, and build trust with enterprise customers.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing.

SOLUTION

What was the scope of their involvement?

Exfiltra provided application, AI, and mobile testing. The team also provided reports, recommendations, and remediation plans.

What is the team composition?

We worked with 2–5 members of Exfiltra's team.

How did you come to work with Exfiltra?

We found Exfiltra through a referral. We chose them over other options because they had high ratings.

What is the status of this engagement?

We worked together in July 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra's work helped us reduce risk to show clients.

How did Exfiltra perform from a project management standpoint?

Exfiltra's project management was good, and they delivered on time. We primarily communicated via virtual meetings.

What did you find most impressive about them?

Exfiltra's communication was impressive.

Are there any areas they could improve?

There's nothing I can come up with.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a company that provides advanced, user-friendly sports management platforms across web and mobile, to different roles e.g. athletes and officials.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing to find any security gaps and retest after fixing them.

SOLUTION

What was the scope of their involvement?

Exfiltra has performed penetration testing on our web and mobile applications and cloud environment. The team has delivered a penetration testing report.

What is the team composition?

We’ve worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

We found Exfiltra through an online search. We chose them over other options because they their approach indicated they could cover all aspects of the security testing we needed.

What is the status of this engagement?

We started working with Exfiltra in August 2025, and our engagement is ongoing for penetration testing after every major release.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra has completed penetration testing and remediation with no critical or major issues outstanding. Our security scores have improved, and all critical and major issues have been remediated.

How did Exfiltra perform from a project management standpoint?

Exfiltra has delivered on time and to tight deadlines. We communicate via email and messaging apps.

What did you find most impressive about them?

Exfiltra’s clear deliverables have helped guide our remediation steps.

Are there any areas they could improve?

No.

BACKGROUND

Introduce your business and what you do there.

I’m an executive of Security Consultant OU, a cybersecurity, privacy, and compliance consultancy for scale-ups. We deliver consistently high-quality results through an integrated model of expert consulting, hands-on implementation, and AI-enhanced service delivery. We enable clients to strengthen their security posture.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Exfiltra?

We needed help with penetration testing of client systems. 

SOLUTION

What was the scope of their involvement?

Exfiltra conducted gray box penetration testing on SaaS platforms and provided a penetration test audit report as the result.

What is the team composition?

We worked with 2–5 teammates from Exfiltra.

How did you come to work with Exfiltra?

Exfiltra invited us for a review. We chose them over other cybersecurity service providers because their pricing fit our budget, they had a great culture fit, they offered good value for the cost, and their company values aligned with ours.

How much have you invested with them?

We spent around $15,000.

What is the status of this engagement?

We worked together from December 2025–January 2026.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Exfiltra identified vulnerabilities in the tested platform, and the clients have successfully remediated them.

How did Exfiltra perform from a project management standpoint?

They had seamless communication and delivered on time, on scope, and on budget. We communicated via virtual meetings, emails, and messaging apps.

What did you find most impressive about them?

Exfiltra had deep expertise in penetration testing.

Are there any areas they could improve?

No, there weren’t any.