Certbar Security

BACKGROUND

Please describe your company and position.

I am the IT Head of a diamond manufacturing company.

Describe what your company does in a single sentence.

We are a real diamond manufacturing company selling polished diamonds across the globe.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Perform Penetration Testing on Network
• Perform Penetration Testing on Web Application
• Perform Penetration Testing on Mobile Application
• Perform Penetration Testing on Admin Panel and Sales User Role
• Firewall Configuration Audit

SOLUTION

How did you find Certbar Security?

• Online Search
• Referral

Why did you select Certbar Security over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Proof of concept for critical vulnerabilities, Firewall configuration audit report, Remediation recommendations, Network penetration testing report, Mobile application security assessment report, API security testing reports with checklist and test case scenarios that were testing throughout the infrastructure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Reassessment Success:
  • After remediation, measure the success rate of retesting fixed vulnerabilities.
  • Aim for a high success rate, indicating that vulnerabilities were effectively addressed.
• Security Posture Improvement:
  • Use a security maturity model or scorecard to assess the overall security posture of the organization before and after the project.
  • Set a target for an increase in the security score or level.
• Incident Response Preparedness:
  • Evaluate the client's incident response plan and readiness.
  •  Measure improvements in response time and effectiveness by conducting simulated incidents.
• Enhanced Firewall Security: 
  • Measure the number of firewall misconfigurations identified and remediated.
  • Assess the alignment of firewall rules with security policies and best practices.

Perform Revalidation once the vulnerabilities are fixed/patched by the Dev-Sec-Ops team

Describe their project management. Did they deliver items on time? How did they respond to your needs?

I had the privilege of working with Certbar Security on a recent Vulnerability Assessment and Penetration Testing project for our web and mobile applications, as well as network infrastructure. Overall, I must say that our experience with their team was highly positive and impactful.

While our experience with Nirav and his team was highly positive, there is always room for improvement. One area they could consider enhancing is the granularity of their remediation recommendations. Providing more detailed steps and best practices for remediation would be beneficial for organizations that may not have extensive security expertise in-house.

In conclusion, I highly recommend Certbar for their expertise in vulnerability assessment and penetration testing. Their professionalism, strong project management skills, and commitment to delivering high-quality results make them a valuable partner in enhancing an organization's cybersecurity posture. We look forward to working with them again and addressing the improvements discussed for an even more refined and secure future engagement.

What was your primary form of communication with Certbar Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What I found most impressive about Certbar Security was their exceptional responsiveness and clear communication throughout the project. Their ability to promptly address our questions and provide expert guidance made the entire vulnerability assessment and penetration testing process highly efficient and productive.

Are there any areas for improvement or something Certbar Security could have done differently?

No, we are happy with the services so far.

BACKGROUND

Please describe your company and position.

I am the V.P. Product Development of Trezix Software Pvt. Ltd.

Describe what your company does in a single sentence.

Developing SaaS product for import and export industires

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Product Security Audit
• Product security advisory

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

• Close to my geographic location
• Good value for cost

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Security Audit, test complete application and find out vulnerability

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Issuing VAPT Certificate from tham demonstrate the success of the project

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes Certbar Security complete the project on time with all required quality we need.

What was your primary form of communication with Certbar Security?

Email or Messaging App

What did you find most impressive or unique about this company?

Their expertise in this field is remarkably profound. Their approach was highly professional and immensely beneficial in assisting us to enhance our product's security.

Are there any areas for improvement or something Certbar Security could have done differently?

While Certbar Security has demonstrated exceptional expertise and professionalism in their services, we believe that there is always room for continuous improvement. One area where they could potentially enhance their service further is by providing more detailed post-assessment recommendations and a structured roadmap for implementing security improvements. This would enable us to have a clearer and more actionable plan for enhancing our product's security.

Additionally, offering regular updates or educational resources to stay informed about the evolving security landscape would be beneficial. Overall, we appreciate their current efforts and look forward to seeing how they can further refine and expand their services in the future.

BACKGROUND

Please describe your company and position.

I am the Co-founder & CEO of Twinr

Describe what your company does in a single sentence.

No-code mobile application builder to convert website into apps.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Find vulnerabilities in our platform
• Security suggestions and certifications

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

• High ratings
• Pricing fits our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Proof of Concepts (POCs) and evidence for each identified vulnerability (ex. Screenshots, Payloads, Remediation, Files, Reports, etc). 
2. Conditions under which the vulnerability may materialize / categories (Technical Impact). 
3. Be part of incident management and risk mitigation processes of the organization to do root cause analysis, report generation (in Certbar’s Reporting Format), and provide mitigation guidelines.
4. Implications and Consequences of not fixing the vulnerability, the report readout session (Business Impact).
5. Overall risk rating for each identified vulnerability based on ease of identification, ease of exploitation, and potential impact. 
6. Conduct security awareness and training programs for all engineers within the organization. 
7. Perform a network security assessment. 
8. Conduct revalidation procedures and ensure that the proper patch/fix are applied to keep the application and its data secure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our journey with Certbar's security team was truly fruitful, and the outcomes speak for themselves: 

• Less Vulnerabilities: The number of issues found went down by a whopping 70%, showing their assessments worked wonders. 
• Fixing High-Risk Problems: They sorted out serious issues really quick, slashing high-risk threats by 90%. 
• Putting in Patches: Almost all the fixes they suggested got put in – a solid 95% hit rate. 
• Safer Ratings: Vulnerabilities got lower risk ratings – on average, two notches down. Faster Response: When things went wrong, we bounced back 40% faster – limiting possible harm. 
• Training Wins: Their training got 90% of our tech folks involved, making security a way of thinking. 
• Smart Teamwork: Teaming up with Twinr and Firebase led to fixing APIs we missed before. 
• Overall Risk Drop: Our combined risk score fell 15%, showing their work improved our safety net. 
• Management Thumbs Up: Our bosses were really pleased, showing Certbar's advice hit the mark. 
• Kept Coming Back: We're still working together – a clear sign of Certbar's skills and reliability. Certbar didn't just check boxes; they made sure our digital space was much more secure.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Certbar's project management approach left an indelible mark on our collaboration. Their meticulousness in delivering items on time and their swift responsiveness to our needs demonstrated their commitment to our project's success. 

• Timely Delivery: Certbar's adherence to project timelines was exceptional. Each milestone, from vulnerability assessments to incident response, was met punctually. This punctuality reassured us of their professionalism and allowed us to plan our remediation efforts and risk mitigation strategies effectively. Their consistency in meeting deadlines illustrated their dedication to the project's rhythm and our organization's security priorities. 
• Attentive Responsiveness: Certbar's responsiveness was nothing short of remarkable. Whenever we had queries, concerns, or needed clarifications, their team was quick to provide comprehensive answers. This level of engagement enhanced the collaborative atmosphere, enabling us to make informed decisions swiftly. 

Their receptiveness to our inquiries ensured that we were always aligned with the progress of the project and the significance of their findings. Whether it was addressing urgent matters or accommodating adjustments to our project's scope, Certbar's responsive nature played a pivotal role in maintaining a smooth and productive partnership. 

In conclusion, Certbar's project management prowess was evident in their steadfast adherence to timelines and their unwavering responsiveness to our needs. This combination of timely delivery and attentive communication significantly contributed to the overall success of the project and solidified Certbar's standing as a trustworthy and effective security partner.

What was your primary form of communication with Certbar Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Certbar's standout feature lies in their comprehensive approach, bridging technical vulnerabilities with business impact. Their collaborative spirit, education initiatives, and proactive risk mitigation set them apart. Transparent reporting and dedication to every facet of security make them an exceptional partner.

Are there any areas for improvement or something Certbar Security could have done differently?

Certbar Security's performance was consistently impressive throughout our engagement. Their proactive approach, clear communication, and dedication to comprehensive security solutions stood out. They consistently exceeded expectations, leaving little room for improvement.

BACKGROUND

Please describe your company and position.

I am the Business Owner of Aarvi Technology

Describe what your company does in a single sentence.

Software Development Service Provider

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Perform Vulnerability Assessment and Penetration Testing (VAPT) on Web and Mobile Applications
• Configure Audit of security perimeters
• Security Architecture Consulting

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

Good value for cost

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Certbar Security for cybersecurity services, and their scope of work was comprehensive. They conducted a thorough assessment of our digital infrastructure, identifying vulnerabilities and potential threats. Key deliverables included:

• a detailed security audit report outlining weaknesses and recommended solutions
• a customized cybersecurity strategy tailored to our needs
• ongoing monitoring services to detect and mitigate emerging threats

Certbar also provided staff training to enhance our internal security protocols. Their expertise and dedication to safeguarding our data were commendable, offering us peace of mind in an increasingly digital world. Certbar Security's services were invaluable in bolstering our cybersecurity defenses.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our experience with Certbar Security for cybersecurity services was highly successful. They significantly improved our digital defenses, enhancing overall security. Their work resulted in tangible improvements, such as identifying vulnerabilities, fortifying our infrastructure, and providing ongoing monitoring. These measures led to increased protection against cyber threats and improved data security. 

Certbar Security's dedication and expertise were evident throughout the project, reflecting the enhanced resilience of our systems. Their services yielded substantial progress and success, leaving us more confident in our cybersecurity posture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Our experience with Certbar Security in the realm of cybersecurity was exceptionally positive. Their project management was impeccable; they exhibited a high level of professionalism and ensured all aspects of the project were well-coordinated. They consistently delivered on time, demonstrating a strong commitment to meeting deadlines. 

Moreover, Certbar Security's responsiveness to our needs was outstanding. They promptly addressed any concerns or queries we had, fostering a strong and open line of communication. Their proactive approach and dedication to client satisfaction underscored the quality of their service. Certbar Security truly excelled in project management, enhancing our confidence in their capabilities.

What was your primary form of communication with Certbar Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about Certbar Security was their unwavering commitment to our cybersecurity needs. Their proactive approach, rapid responsiveness, and tailored solutions made them an exceptional choice. Their dedication to our protection was truly impressive and unique.

Are there any areas for improvement or something Certbar Security could have done differently?

none

BACKGROUND

Please describe your company and position.

I am the CEO of Artoon Solutions Pvt Ltd

Describe what your company does in a single sentence.

We design and develop webapps, mobile apps and casual/ hypercasual/ multiplayer mobile games for our clients through out the world.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• To do security assessment of our network an servers
• To find out the remedy on how to resolve the security loopholes

SOLUTION

How did you find Certbar Security?

• Community

Why did you select Certbar Security over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Certbar will find a single point of access and pivot to gain the maximum impact on the Artoon system with due care.
2. Proof of Concepts (POCs) and evidence for each identified vulnerability (ex. Screenshots, Configurations, Files, Reports, etc.)
3. Conditions under which the vulnerability may materialize. (Technical Impact)
4. Implications and consequences of not fixing the vulnerability, the report readout session (Business Impact).
5. Conduct one security awareness and training program for all engineers within the organization.
6. Certbar’s goal to perform network security assessment.
7. Pentest and perform an audit on AWS instances and submit the report for the same.
8. Perform Red-Teaming to gain access of Artoon network from external sources.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We were able to identify network security issues and we were able to apply the fixes as required. Also, the AWS server security issues were identified and related security measures were applied on the server. We were able to close the loop holes which were threat to code theft.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Once the necessary security access was granted, they were doing all the security tests and actions on different time frame without disrupting any of our day work. That was actually helpful so that we could continue to deliver the projects to our clients. They provided us the security reports on time along with possible remedies. This helped us in closing down those loopholes and add security patches. They were having enough patience while we implemented the security patches.

Then they retested the security to make sure that the patches are working as intended. Also, they communicated each and every issue over a meeting and supported us to understand the problem. Overall, their project management was top-notch, and we were very happy with it.

What was your primary form of communication with Certbar Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Prompt communication was the most impressive when working with Certbar. Their security report was very detailed.

Are there any areas for improvement or something Certbar Security could have done differently?

They could provide a little bit more info on how to the security fixes should be done and what the best practices to keep the network secure from future vulnerabilities.

BACKGROUND

Please describe your company and position.

I am the Director IT

Describe what your company does in a single sentence.

A Natrual diamond Manufacturing Company.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Vulnerabiltiy Assessment & Peneteration Testing
• Cyber security of iOS and Android App
• Website Security Audit

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

There were in total 3 projects that they were involved with. first one was about the VAPT of the office infrastructure and audit whether the secutiy parameters are upto date and capable enough to detect and stop a data breach. Second was about the Website testing that theres no possible leakages in the development of the website and its susceptible to a ATO or a data leak.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Them giving us a Assurance report was helpful for us to be able to focus on core business function as than it would give up further more confidence about all factors being ok. We were able to detect some Critical bugs which our team had missed and could have been a possible loophole for other companies to exploit

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes they delivered on time, And they responded Reasonably well helping us detect possible loop holes

What was your primary form of communication with Certbar Security?

Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed with the availability of the managers whenever the attention was needed and the System of keeping all the updates on the loop.

Are there any areas for improvement or something Certbar Security could have done differently?

Yes they could have had more team members involved and make the Reporting even better and could have possibly given a further more detailed report.

BACKGROUND

Please describe your company and position.

I am an executive at Semsto

Describe what your company does in a single sentence.

Semsto is solution which is best suitable for small and medium enterprise for manage operations like Recruitment, Employee On-boarding, HRM, Payroll, Project management, Task management, CRM, Assets, Goals, Finance (accounting) and Budget. Dashboard provide useful information to management for many operations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Identify and mitigate security risks.
• Improve compliance with industry regulations.
• Protect my organization's data
• Respond to security incidents.

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

• Close to my geographic location
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Initial meeting: Certbar Security met with us to discuss our organization's security goals and objectives, as well as the scope of the assessment. 
2. Vulnerability scanning: Certbar Security scanned our organization's IT infrastructure for vulnerabilities. This included web applications, networks, systems, and devices.
3. Penetration testing: Certbar Security conducted penetration tests on our organization's IT infrastructure to simulate real-world attacks. This allowed them to identify vulnerabilities that attackers could exploit.
4. Risk assessment: Certbar Security assessed the risks associated with the found vulnerabilities. This included evaluating the likelihood and impact of each vulnerability being exploited.
5. Remediation plan: Certbar Security developed a remediation plan to address the vulnerabilities found. This plan included recommendations for how to fix the vulnerabilities and mitigate the risks. 
6. Final report: Certbar Security delivered a final report summarizing the assessment findings. The report also included the remediation plan and recommendations for improving my organization's security posture. 

The key deliverables of the security assessment were as follows: A list of vulnerabilities that were found A risk assessment for each vulnerability A remediation plan to address the vulnerabilities A final report that summarized the findings of the assessment

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A reduction in the number of vulnerabilities found. A reduction in the number of vulnerabilities found. The initial vulnerability scan found vulnerabilities in our IT infrastructure. After implementing the remediation plan developed by Certbar Security, the number of vulnerabilities was reduced significantly. This demonstrates the effectiveness of the remediation plan—an improvement in compliance with industry regulations. 

The security assessment found that my organization was not fully compliant with several industry regulations. Certbar Security guided improving compliance with these regulations, and I have implemented these recommendations. This will help protect my organization from regulatory penalties and ensure I meet my legal obligations, increasing employee security awareness. Certbar Security conducted security awareness training for my employees.

This training helped to increase employee awareness of security risks and how to protect themselves and my organization from cyberattacks. This is an important step in improving my organization's overall security posture—a faster response time to security incidents. Certbar Security developed a plan for responding to security incidents.

This plan includes steps for containing the incident, investigating the cause, and recovering from the attack. I have implemented this plan and am confident it will help me respond more quickly and effectively to future security incidents.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Certbar Security's project management was excellent. They were very organized and efficient, and they kept me updated on the progress of the project throughout the entire process. They also delivered all the items on time and were always responsive to my needs.

What was your primary form of communication with Certbar Security?

In-Person Meeting

What did you find most impressive or unique about this company?

The most impressive thing about Certbar Security is their commitment to customer service. They were always responsive to our needs and went above and beyond to ensure that We was satisfied with their services. They also had a deep understanding of the security threats that our organization faced, and they were able to provide us with actionable advice on how to improve our organization's security posture.

Are there any areas for improvement or something Certbar Security could have done differently?

we are happy with the overall service which Certbar Security Private Limited provided.

BACKGROUND

Please describe your company and position.

I am an executive at Narola Infotech

Describe what your company does in a single sentence.

Software Consulting Service Provider

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• Perform VAPT on Web and Mobile Applications
• SOC monitoring on Client's infrastructure
• Help our clients to improve security governance
• Configure Audit of security perimeters
• Configure audit of AWS & Azure Instances
• Security Architecture Consulting

SOLUTION

How did you find Certbar Security Private Limited?

Referral

Why did you select Certbar Security Private Limited over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Perform VAPT on our client's Applications, Softwares & Network as per OWASP top 10, SANS top 25, and OSSTMM methodology. 
• Audit security configuration for security perimeters and cloud instances with respect to CIS benchmarks. 
• Provide dedicated resources to clients for SOC monitoring. 
• Provide the reporting in a timely manner. 
• Perform Red Teaming if client requests such services.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Joint weekly meeting with clients 
• Executive Summary Reporting for SOC Monitoring on monthly basis 
• VAPT reporting as per SDLC cycle 
• Consulting on Security Architecture as needed 
• Build documented policies for client 
• Quarterly Configuration Audit Reports on Security Perimeters 
• Quarterly Configuration Audit Reports on Cloud instances

Describe their project management. Did they deliver items on time? How did they respond to your needs?

deliveries on time or before.

What was your primary form of communication with Certbar Security Private Limited?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

I was impressed by their expertise in the area and their proactiveness.

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

none

BACKGROUND

Please describe your company and position.

I am the Head IT Manager of a manufacturing company

Describe what your company does in a single sentence.

We are a jewelry manufacturing company and supply diamonds and jewelry thorough the globe.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• SOC monitoring on public facing IT assets
• VAPT of Mobile Application (Android & iOS)
• VAPT Network (Surat & Mumbai BU)
• VAPTof Web Application (ERP/Trade portal/Admin portal)
• AWS configuration audit

SOLUTION

How did you find Certbar Security Private Limited?

Referral

Why did you select Certbar Security Private Limited over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Vulnerability Assessment and Penetration Testing (VAPT): Perform regular VAPT on the web application and APIs to identify potential vulnerabilities and weaknesses. Provide detailed reports on identified vulnerabilities, including severity levels and recommended remediation steps. 
• AWS Configuration Audit: Review the AWS infrastructure and services and audit the security configuration of AWS resources. SOC Monitoring: Implement agents in critical systems and monitor events. Create tickets of potential event and ensure the event through VAPT, collaborate with Development team to mitigate issues. 
• Network Security Assessment: Identify potential vulnerabilities review firewall rules, network segmentation, and access controls. Provide recommendations to strengthen network security and prevent unauthorized access or data breaches. 
• Reporting and Documentation: Maintain detailed documentation of all security assessments, findings, and remediation actions taken.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Auditing CIS benchmarks
• Weekly VAPT reporting and final report at the end of each application/network (BU based). 
• Monthly SOC monitoring reports and detailed incident response report that was carried out successfully.
• Developing resilience in AWS configuration
• Monitor Security Incidents and follow a ticking system to ensure reporting

Describe their project management. Did they deliver items on time? How did they respond to your needs?

When security assessments are being conducted on staging and live environment then some delay was expected and which was communicated to us. So we are very satisfied with the delivery even after huddles.

What was your primary form of communication with Certbar Security Private Limited?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The reporting format. Communication and all the heads-up where delay is expected. Robust testing methodology. And support from top management.

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

No. We are very happy with their services, and so far, we have no complains.

BACKGROUND

Please describe your company and position.

I am the CTO and Co-founder of DhiWise Private Limited

Describe what your company does in a single sentence.

DhiWise is a programming platform where developers can convert their designs into developer-friendly code for mobile and web apps. DhiWise automates the application development lifecycle and instantly generates readable, modular, reusable code.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• Network, Application and Source code security
• Cloud Security

SOLUTION

How did you find Certbar Security Private Limited?

Referral

Why did you select Certbar Security Private Limited over others?

• Close to my geographic location
• Pricing fit our budget
• Referred to me

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Security Policy Development (GDPR & ISO 27001): 
  • Build a thorough security policies and practices. 
• Vulnerability Assessment and Penetration Testing (VAPT): 
  • Perform regular VAPT on the web application and APIs to identify potential vulnerabilities and weaknesses. 
  • Provide detailed reports on identified vulnerabilities, including severity levels and recommended remediation steps. 
• AWS Configuration Audit: 
  • Review the AWS infrastructure and services and audit the security configuration of AWS resources. 
• Network Security Assessment: 
  • Identify potential vulnerabilities review firewall rules, network segmentation, and access controls. 
  • Provide recommendations to strengthen network security and prevent unauthorized access or data breaches. 
• Security Awareness Training: 
  • Cover essential topics such as phishing awareness, password security, data handling, etc. 
• Reporting and Documentation: 
  • Maintain detailed documentation of all security assessments, findings, and remediation actions taken.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Weekly VAPT reporting and procedure implementation. 
• Review meeting of the policies. 
• Timely network assessment and report readout sessions.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team was proactive however, while building governance some delay is expected, and that was communicated before. Overall we enjoyed working with them.

What was your primary form of communication with Certbar Security Private Limited?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They were conducting 2 sets of review meetings, first to understand our security posture and the second to suggest necessary changes and deliver the policies around it, which served as frameworks.

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

We think they are very enthusiastic team and will keep learning as they did while working for us.