Certbar Security

BACKGROUND

Please describe your company and position.

I am the Founder & CEO of WRP Solution

Describe what your company does in a single sentence.

We are providing customized software solutions around the globe.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• Perform VAPT on Web & Mobile applications for a Logistics Company
• Pentest and review AWS configuration
• Guide the development team to apply proper patch/fix to identified vulnerabilities

SOLUTION

How did you find Certbar Security Private Limited?

Referral

Why did you select Certbar Security Private Limited over others?

• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Web Application Assessment: 

• Identify vulnerabilities in the web application code, configuration, and infrastructure. Assess the application's resilience against common attack vectors (e.g., SQL injection, Cross-Site Scripting, etc.). 
• Evaluate the effectiveness of access controls and authentication mechanisms. 
• Analyze the application's compliance with industry best practices and security standards. 

Mobile Application Assessment: 

• Identify vulnerabilities in the mobile application code, configuration, and backend services. 
• Assess the application's resistance against common mobile-specific threats (e.g., insecure data storage, insecure communication channels, etc.). 
• Evaluate the effectiveness of access controls and authentication mechanisms. 
• Analyze the application's compliance with industry best practices and security standards. 

AWS Security Assessment: 

• Assess the security configuration of AWS services utilized by the organization. 
• Identify vulnerabilities in AWS infrastructure, network configuration, and access controls. 
• Evaluate the effectiveness of security groups, IAM policies, and other AWS security mechanisms. 
• Analyze the compliance of AWS infrastructure with industry best practices and CIS benchmarks. 

CIS Benchmark Audit: 

• Perform an audit based on the Center for Internet Security benchmarks for the relevant systems and platforms used by the logistics company. 
• Evaluate the compliance of systems and platforms with CIS benchmarks. 
• Identify any deviations from recommended security configurations and provide recommendations for remediation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• The application was tested with OWASP top 10, SANS top 25 and OSSTMM methodology.
• All the patches/fixes were implemented within 2 months
• CIS benchmarks were implemented and strengthened the AWS configuration.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they delivered items on time and responded promptly to my needs!

What was your primary form of communication with Certbar Security Private Limited?

• In-Person Meeting
• Virtual Meeting

What did you find most impressive or unique about this company?

The company has a unique methodology and delivers 3 line items for VAPT. 

1. VAPT report
2. OWASP checklist
3. Test cases in which they tried to bypass business logic

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

I'm happy with the overall service which was provided by Certbar Security Private Limited.

BACKGROUND

Please describe your company and position.

I am the CEO of a software company

Describe what your company does in a single sentence.

Lead management and new patient intake automation

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

Software vulnerability assessment and penetration testing

SOLUTION

How did you find Certbar Security Private Limited?

Referral

Why did you select Certbar Security Private Limited over others?

• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Vulnerability Assessment: Vulnerability testing focuses on identifying weaknesses and vulnerabilities in a system, network, or application. The primary goal is to discover potential security flaws that malicious actors could exploit. The scope of vulnerability testing typically involves: 

• Identification: Enumerating all potential vulnerabilities within the target system or application. This includes known vulnerabilities, misconfigurations, and weak security practices. 
• Assessment: Evaluate each vulnerability's severity and impact to prioritize remediation efforts. This assessment may involve assigning a risk rating or severity level to each identified vulnerability. 
• Documentation: Providing a detailed report that outlines the identified vulnerabilities, their potential impact, and recommendations for remediation. The report may include technical descriptions, evidence of exploitation, and steps to reproduce the vulnerabilities. 

Key Deliverables for Vulnerability Testing: 

• Vulnerability Assessment Report: A comprehensive report detailing all identified vulnerabilities, their severity ratings, and recommended remediation steps. 
• Risk Prioritization: A prioritized list of vulnerabilities based on their severity and potential impact, helping organizations focus on the most critical issues first. 
• Recommendations: Actionable recommendations and mitigation strategies to address identified vulnerabilities and strengthen the security posture of the system or application. 

Penetration Testing: 

• Reconnaissance: Gathering information about the target system, network, or application to understand potential attack vectors and entry points. 
• Exploitation: Actively attempting to exploit vulnerabilities to gain unauthorized access or compromise the system's security. This may involve a combination of automated tools and manual techniques. 
• Post-Exploitation Analysis: Assessing the impact of successful exploits, such as extracting sensitive data, escalating privileges, or pivoting to other systems. 
• Reporting: Documenting the entire penetration testing process, including the identified vulnerabilities, successful exploits, and recommendations for remediation. 

Key Deliverables for Penetration Testing: 

• Penetration Testing Report: A detailed report that outlines the findings, including successful exploits, compromised systems, and potential avenues of attack. It includes recommendations for addressing vulnerabilities and improving the security posture. 
• Proof of Concept: Demonstrating successful exploitation of vulnerabilities to provide concrete evidence of potential risks. 
• Risk Mitigation Strategies: Providing specific recommendations and countermeasures to mitigate identified vulnerabilities and enhance the overall security of the system or application.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Number of vulnerabilities identified: This metric quantifies the total count of vulnerabilities discovered during the assessment. It provides a baseline for understanding the security posture and the extent of vulnerabilities within the system or application. 
• Severity ratings: Each identified vulnerability is typically assigned a severity rating or risk score. Measuring the distribution of severity levels helps prioritize remediation efforts and gauge the overall security risk. 
• Remediation completion rate: Tracking the percentage of identified vulnerabilities that have been addressed and remediated over time. This metric demonstrates the organization's commitment to addressing security weaknesses and improving the overall security posture. 
• Reduction in vulnerability count: Monitoring the decrease in the total number of vulnerabilities after implementing remediation measures. This demonstrates progress in mitigating risks and improving the overall security resilience.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

From start to finish, Certbar demonstrated professionalism, expertise, and a commitment to delivering high-quality results. First and foremost, the team at Certbar showcased an impressive level of knowledge and proficiency in the field of cybersecurity. Their deep understanding of vulnerabilities and attack vectors allowed them to assess our systems, networks, and applications thoroughly. Their comprehensive approach left no stone unturned, ensuring that potential weaknesses were identified and examined meticulously. Communication with Certbar was prompt, clear, and effective throughout the engagement. 

They kept us informed at every stage of the process, explaining technical details in a way that was easy to understand, even for non-technical personnel. Their ability to bridge the gap between technical jargon and business context was truly commendable. The deliverables provided by Certbar were of the highest quality. The vulnerability assessment report was incredibly thorough, outlining each identified vulnerability along with their severity ratings and detailed recommendations for remediation.

It was evident that Certbar took the time to tailor the report to our specific needs, providing actionable steps to address vulnerabilities in a prioritized manner. During the penetration testing phase, Certbar demonstrated exceptional skill and professionalism. Their ethical hacking techniques were carried out in a controlled manner, showcasing their ability to simulate real-world attacks without causing any disruption to our operations. The penetration testing report was equally impressive, detailing successful exploits, and compromised systems, and offering insightful mitigation strategies to bolster our security defenses. 

Furthermore, Certbar went above and beyond by providing post-engagement support and guidance. They were readily available to answer any follow-up questions we had and offered valuable advice on implementing security measures to enhance our overall defense posture. Overall, I cannot recommend Certbar enough for vulnerability assessment and penetration testing services. Their expertise, attention to detail, and commitment to delivering exceptional results have exceeded our expectations. 

Thanks to Certbar, we now have a clear roadmap to enhance our security, address vulnerabilities, and ensure the integrity of our systems. They are truly a trusted partner in safeguarding our organization's digital assets. I wholeheartedly endorse Certbar and will undoubtedly engage their services again in the future.

What was your primary form of communication with Certbar Security Private Limited?

Virtual Meeting

What did you find most impressive or unique about this company?

Overall, the depth of knowledge, effective communication, thoroughness, and value relative to cost were the most impressive aspects of Certbar's services. They truly exceeded our expectations and proved to be a trusted partner in safeguarding our digital assets.

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

There was nothing they needed to improve on.

BACKGROUND

Please describe your company and position.

I am the Founder, CEO of LinkDM

Describe what your company does in a single sentence.

LinkDM provides creators with Instagram comment for DM solutions. 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Complete a Penetration Test and provide certificate on completion

SOLUTION

How did you find Certbar Security?

Online Search

Why did you select Certbar Security over others?

• Close to my geographic location
• Pricing fit our budget
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged with Certbar to complete a penetration test on our web application and provide a certificate once we successfully passed their pentest security checks. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

They identified potential risks that we addressed, and once compliant we received our certification

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, their team was great to work with, very fast and delivied on time. We will use their services again in the near future. 

What was your primary form of communication with Certbar Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They were fast and responsive. They had good understanding of SaaS platforms also.

Are there any areas for improvement or something Certbar Security could have done differently?

None

BACKGROUND

Please describe your company and position.

I am the Direcot of Softpulse Infotech Pvt Ltd

Describe what your company does in a single sentence.

We are Sofftware develeopment agency

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• To check security check points

SOLUTION

How did you find Certbar Security?

Online Search

Why did you select Certbar Security over others?

High ratings

How many teammates from Certbar Security were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Checkpoint for application

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Yes i am happy with result

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes we received result on time

What was your primary form of communication with Certbar Security?

Email or Messaging App

What did you find most impressive or unique about this company?

We outsourced our project work to Certbar, and the results were outstanding. Their team is highly knowledgeable, responsive, and professional. They helped us identify and resolve critical security issues quickly and efficiently. We were extremely satisfied with their service and would definitely recommend them for any security-related needs.

Are there any areas for improvement or something Certbar Security could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the CEO of Sarvadhi Solutions Private Limited

Describe what your company does in a single sentence.

We specialize in delivering cutting-edge technology solutions for diamond and jewelry, education, and customer website and mobile app development.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Perform Penetration Testing on Web Application

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

Good value for cost

How many teammates from Certbar Security were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

A security auditing in a web application which include Threat/Attack Simulations and Cybersecurity Consulting

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Provide initial VAPT report
• Perform revalidation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered the work on time with the expected quality.

What was your primary form of communication with Certbar Security?

Virtual Meeting

What did you find most impressive or unique about this company?

We were impressed with their communication and work quality.

Are there any areas for improvement or something Certbar Security could have done differently?

They provide the best services.

BACKGROUND

Please describe your company and position.

I am the CEO of an it services company

Describe what your company does in a single sentence.

We are software development company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security to accomplish?

• Security
• Audit

SOLUTION

How did you find Certbar Security?

Referral

Why did you select Certbar Security over others?

• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Certbar Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We took the help of CertBar Security for Security Audit for our web app and they helped us to fix security related bugs, helped us to setup secure servers and helped us to achieve all required compliance related to security.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Security Bugs and Fixes 
• Secure Server management 
• HIPAA Compliance

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They are really good with deadlines and delivery. Upon each request and question, they were available to support. Working with them was the best decision for us.

What was your primary form of communication with Certbar Security?

In-Person Meeting

What did you find most impressive or unique about this company?

Value for money and time

Are there any areas for improvement or something Certbar Security could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the CEO of digiQC

Describe what your company does in a single sentence.

B2B SAAS available on IOS, Android smartphones and all web browsers

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• VAPT

SOLUTION

How did you find Certbar Security Private Limited?

TIE Surat

Why did you select Certbar Security Private Limited over others?

Referred to me

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

VAPT for web and mobile application

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Tracker was made of vulnerabilities and each had to be resolved.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes. Very responsive and responsible.

What was your primary form of communication with Certbar Security Private Limited?

Virtual Meeting

What did you find most impressive or unique about this company?

Detailed approach and consultative solution

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

They are highly technical experts, improvement can be on their design aspects esp. Reports can be more graphically & visually attractive.

BACKGROUND

Please describe your company and position.

I am the Director of Dharmanandan Diamonds Pvt Ltd

Describe what your company does in a single sentence.

Excellent Service with reasonable cost.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Certbar Security Private Limited to accomplish?

• Securing internal network from any haking
• Secure the online website and apps from haking

SOLUTION

How did you find Certbar Security Private Limited?

In person pitch

Why did you select Certbar Security Private Limited over others?

• Pricing fits our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Certbar Security Private Limited were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

SOW was to identify potential haking loop holes in the netwrks. VNPT

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Cerbar identify many loop holes, we have block those. second year again run the test and found few which have further patch them all. now we feel sense of securities.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes and Yes

What was your primary form of communication with Certbar Security Private Limited?

• In-Person Meeting
• Virtual Meeting

What did you find most impressive or unique about this company?

We were most pleased with their personal involvement. They took deep understanding of requirements and provide solutions.

Are there any areas for improvement or something Certbar Security Private Limited could have done differently?

No I don't have any suggestion as of now.