DeepStrike

BACKGROUND

Please describe your company and position.

I am the CEO of a cybersecurity company.

Describe what your company does in a single sentence.

We had the pleasure of working with DeepStrike in the past. Although we are competitors today, it is only fair to recognize their outstanding professionalism and expertise.

The DeepStrike team stands out for their dedication, commitment, and ability to deliver top-quality solutions with precision and excellence. Their professionalism, attention to detail, and collaborative spirit made working with them a truly rewarding experience.

True quality shines through experience, and DeepStrike has undoubtedly proven their worth. If you are seeking a reliable and skilled partner, we highly recommend them without hesitation.

With utmost respect and appreciation,
CEO, Cybersecurity Company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Penetration Testing for Mobile and Web Application

SOLUTION

How did you find DeepStrike?

• Referral
• Other

Why did you select DeepStrike over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from DeepStrike were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

As part of our partnership with DeepStrike, we collaborated to provide penetration testing services for our clients. The scope of work included comprehensive security assessments aimed at identifying vulnerabilities and enhancing the overall security posture of our clients' systems.

Key Deliverables:
Pre-Engagement Consultation:Scope definition and alignment on testing objectives.
Risk assessment and identification of critical assets.

Penetration Testing:
Conducting external and internal network penetration tests.
Application security testing, including web and mobile applications.
Cloud infrastructure security assessments.

Reporting and Documentation:
Detailed reports of identified vulnerabilities with risk classifications.
Practical recommendations for remediation.
Executive summary reports for stakeholders.

Post-Testing Support:
Remediation validation testing (re-testing).
Security best practices consultation.
Knowledge transfer sessions with client teams.

Through this collaboration, DeepStrike demonstrated a high level of technical expertise, delivering actionable insights and ensuring that our clients’ security frameworks were thoroughly evaluated and strengthened.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our clients were extremely satisfied with the service provided, praising the professionalism and expertise of the DeepStrike team. The engagement led to the identification and remediation of critical vulnerabilities, significantly enhancing our clients' security posture and boosting their confidence in their systems' resilience.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike demonstrated excellent project management, delivering all items on time and maintaining clear, consistent communication throughout the engagement. They were highly responsive to our needs, adapting quickly to feedback and ensuring a smooth, efficient collaboration.

What was your primary form of communication with DeepStrike?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about DeepStrike was their exceptional team spirit, deep expertise, and high level of competence. A special mention goes to Khaled, the CEO, whose leadership, vision, and dedication truly set the company apart and contributed significantly to the success of our collaboration.

Are there any areas for improvement or something DeepStrike could have done differently?

We hope the DeepStrike team continues their impressive growth and maintains the same high level of service and excellence in future projects.

BACKGROUND

Please describe your company and position.

I am the Co-Founder of Unstract

Describe what your company does in a single sentence.

Unstract is an open-source platform that automates unstructured data ETL at scale. Leveraging the power of LLMs, Unstract turns real world scanned, handwritten, and smart phone clicked documents into actionable structured data, empowering critical use cases across banking, financial services, insurance and healthcare, enabling efficiency, accuracy, and scalability in document-driven workflows.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• We hired DeepStrike for a thorough, manual penetration test to uncover critical vulnerabilities and strengthen our security as we scale.

SOLUTION

How did you find DeepStrike?

inbound

Why did you select DeepStrike over others?

• Great culture fit
• Good value for cost
• Company values aligned
• security expertise

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of Work & Key Deliverables

DeepStrike conducted a comprehensive, manual penetration test on our platform to identify critical security vulnerabilities. Their assessment went beyond automated scans, ensuring deep, high-quality findings.

Key Deliverables:
In-depth Security Testing – Manual penetration testing focused on real, exploitable vulnerabilities.
Detailed Vulnerability Report – Comprehensive documentation of findings, including risk severity and impact.
Actionable Remediation Guidance – Clear, prioritized recommendations for fixing identified issues.
Follow-up Consultation – Post-assessment discussions to review findings and remediation strategies.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

DeepStrike’s penetration testing delivered tangible security improvements, ensuring our platform is more resilient against potential threats. Key measurable outcomes include:

• Identified Critical Vulnerabilities – DeepStrike uncovered high-risk security gaps that had been missed by previous audits.
• Actionable Fixes Implemented – We successfully remediated key vulnerabilities based on their detailed recommendations.
• Enhanced Security Posture – Strengthened compliance readiness and reduced potential security risks as we engage with enterprise customers.
• Faster Issue Resolution – Their detailed reporting and real-time collaboration enabled swift remediation, minimizing security exposure.

DeepStrike’s expertise provided immediate value, helping us proactively secure our platform as we scale.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike’s project management was excellent. They delivered all findings on time, maintained clear communication, and were highly responsive to our needs. Their structured approach and detailed reporting made the process smooth and efficient.

What was your primary form of communication with DeepStrike?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

DeepStrike’s fully manual approach to penetration testing sets them apart. Unlike many vendors relying on automated scans, they conduct deep, hands-on security assessments that uncover critical vulnerabilities others miss. Their expertise, responsiveness, and ability to deliver real, actionable insights make them a standout partner.

Are there any areas for improvement or something DeepStrike could have done differently?

DeepStrike’s work was highly thorough and effective. If anything, more flexible pricing options for early-stage startups would be helpful to make ongoing security testing more accessible. Otherwise, their expertise and approach were top-notch.

BACKGROUND

Please describe your company and position.

I am a department head for YOUGotaGift.com Ltd

Describe what your company does in a single sentence.

YOUGotaGift is the leading marketplace for Digital Gift Cards (eGift Cards) in MENA. With the largest catalogue of 700+ regional brands, YOUGotaGift distributes its eGift Cards through a broad network of clients across loyalty, incentives, online, retail & other international networks. 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Continuous Penetration Testing
• Compliance Penetration Testing
• Dark Web Monitoring

SOLUTION

How did you find DeepStrike?

Online Search

Why did you select DeepStrike over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from DeepStrike were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired DeepStrike to conduct a penetration test on our critical assets and infrastructure to ensure the highest level of security and resilience against potential cyber threats. Given DeepStrike’s expertise in manual penetration testing, their proven track record in identifying vulnerabilities, and their deep understanding of modern attack vectors, we trusted them to rigorously assess our systems.The scope was a large infrastructure of payment systems, APIs, web applications, mobile applications, internal admin panels, and third-party integrations

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our penetration testing engagement with DeepStrike delivered real, measurable improvements to our security posture. Their thorough assessment helped us strengthen our defenses, refine our security controls, and adopt best practices that reduced potential risks across our systems.Beyond just testing, the engagement ensured that our security policies and infrastructure aligned with key industry standards like [PCI DSS, Aramco CCC etc.], helping us stay compliant and mitigate regulatory risks.

DeepStrike’s approach also gave our security team valuable hands-on experience, improving their ability to detect and respond to threats more effectively.One of the most valuable takeaways was the comprehensive executive report DeepStrike provided, which outlined key risks, prioritized recommendations, and actionable next steps.

This gave our leadership team clear insights to make informed security decisions and plan for the future.

Working with DeepStrike wasn’t just about finding gaps—it was about building a stronger, more resilient security foundation that helps us stay ahead of evolving cyber threats.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike managed the project efficiently, delivering all milestones on time while maintaining high-quality assessments. They were highly responsive to our needs, adapting as required and providing clear communication throughout. Their structured approach and proactive support made the engagement smooth and effective.

What was your primary form of communication with DeepStrike?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We’ve worked with many vendors before, and most of them rely on automated scanners that provide little value, producing generic reports with no real impact.

DeepStrike takes a completely different approach. Their team conducts thorough, manual testing, leaving no stone unturned and find genuinely interesting and sophisticated security flaws that others vendor miss.

What sets them apart is their deep technical expertise, creativity, and real-world attacker mindset. They don’t just check for known issues; they think like hackers, exploring unique attack vectors that go beyond standard testing.

Their hands-on methodology, combined with clear and actionable reporting, makes them an invaluable partner for any organization serious about security. I really love working with them and I’m grateful for their efforts

Are there any areas for improvement or something DeepStrike could have done differently?

Nothing

BACKGROUND

Please describe your company and position.

I am the CTO of an AI company 

Describe what your company does in a single sentence.

We offer an AI copilot for wherever you work, making your meetings, emails, and messages more productive with summaries, content discovery, and recommendations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Continuous penetration testing and monitoring

SOLUTION

How did you find DeepStrike?

Referral

Why did you select DeepStrike over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from DeepStrike were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Application and penetration testing, as well as continuous monitoring and retesting of application changes with feedback provided in realtime directly to our engineering teams.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

DeepStrike provided a full cybersecurity evaluation of our existing application endpoints, along with detailed documentation regarding any areas of opportunity for improvements with concrete remediation recommendations. Additionally, DeepStrike provides timely and continuous feedback on new application modules during our standard development process. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike communicated with my team as though they were a part of it, using our preferred tools for low-latency chat, video conferencing, and documentation sharing. They consistently delivered high-quality results on time and built a great working relationship with my team.

What was your primary form of communication with DeepStrike?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Unlike some vendors, who may simply run a suite of standard tests as part of a cybersecurity evaluation, the DeepStrike team went above and beyond to ensure they fully understood our product from a customer perspective. At the same time, they evaluated relevant portions of our application. This allowed the DeepStrike team to produce higher-quality reports tailored to our specific needs.

Are there any areas for improvement or something DeepStrike could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the CTO of a flower arrangement company 

Describe what your company does in a single sentence.

Our company delivers fresh, seasonal flower arrangements directly to customers’ doors through a flexible subscription service.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• penetration testing
• vulnerability scans to identify security weaknesses, assess potential risks, and strengthen the overall cybersecurity posture of our systems.

SOLUTION

How did you find DeepStrike?

Referral

Why did you select DeepStrike over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Objective:
To assess the security posture of our systems by identifying vulnerabilities, testing for potential exploits, and providing actionable recommendations for mitigation.

Scope of Work:
1. Penetration Testing
Target Areas:

Web applications
APIs
Internal & external network infrastructure
Cloud environments
Authentication & authorization mechanisms
Testing Methodology:

Black-box testing (external attacks with no prior knowledge)
Grey-box testing (internal testing with limited credentials)
Social engineering assessments (if in scope)
Key Deliverables:

Exploitable vulnerabilities report
Proof-of-concept (PoC) for identified risks
Risk severity classification (Critical, High, Medium, Low)
Recommendations for remediation
Retesting after fixes (if included in scope)
2. Vulnerability Scanning
Automated scanning of:

Network infrastructure (internal & external)
Cloud environments
Web applications & APIs
Security misconfigurations
Key Deliverables:

Comprehensive vulnerability assessment report
List of detected security gaps
Suggested patches and fixes
Compliance alignment recommendations (e.g., PCI DSS, GDPR)
3. Reporting & Recommendations
Detailed assessment reports with technical findings and business impact analysis
Executive summary report for senior management
Remediation plan with prioritization based on risk level
Post-assessment consultation to discuss findings and mitigation strategies
Timeline & Milestones:
Kickoff & Scoping – Define assets, testing methodologies, and rules of engagement
Reconnaissance & Scanning – Identify potential entry points and vulnerabilities
Exploitation & Testing – Attempt to exploit vulnerabilities to assess impact
Reporting & Recommendations – Provide detailed findings and remediation plan
Retesting & Validation – Verify that security fixes are effective (if included in scope)
Success Criteria:
All critical and high-risk vulnerabilities are identified and reported
Recommendations are actionable and prioritized
No disruption to business operations during testing
Compliance requirements are assessed and addressed

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The engagement with DeepStrike successfully strengthened our security posture by identifying and addressing key vulnerabilities across our infrastructure. The following outcomes demonstrate progress and success:

Identified and Mitigated Security Risks

Successfully detected and remediated critical and high-risk vulnerabilities.
Improved overall system security by addressing configuration weaknesses and potential attack vectors.

Enhanced Compliance and Risk Management

Aligned security measures with industry best practices and compliance requirements.
Implemented policy improvements and security controls to mitigate future risks.
Improved System and Infrastructure Security

Strengthened network security by resolving identified misconfigurations.
Enhanced access control mechanisms and authentication processes.
Increased Incident Response Readiness

Provided insights and recommendations to improve threat detection and response capabilities.
Strengthened internal security awareness and best practices among relevant teams.
Seamless Business Operations

Testing was conducted without significant disruption to operations.
Ensured business continuity while improving security resilience.
Validation and Ongoing Security Improvements

Successfully validated security enhancements through follow-up assessments.
Established a framework for continuous monitoring and security improvements.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike demonstrated strong project management throughout the engagement. They adhered to agreed timelines and successfully delivered all key milestones on schedule. Their approach was structured and well-communicated, ensuring transparency at every stage of the process.

Timely Deliverables: All penetration testing, vulnerability scanning, and reporting were completed within the expected timeframe.
Responsive & Adaptive: They were proactive in addressing any concerns or additional requests, ensuring our specific security needs were met.
Clear Communication: Regular updates and progress reports were provided, keeping us informed of findings, risks, and recommendations.
Efficient Collaboration: Their team worked seamlessly with our internal teams, minimizing disruption while maintaining a thorough testing process.
Overall, DeepStrike was reliable, responsive, and effective in delivering a well-managed security assessment

What was your primary form of communication with DeepStrike?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about DeepStrike was their expertise, precision, and proactive approach to cybersecurity.

Thorough & Detail-Oriented Testing – Their penetration testing and vulnerability scans were exceptionally in-depth, uncovering potential risks that might have been overlooked by standard assessments.
Proactive & Solution-Focused – Rather than just identifying vulnerabilities, they provided actionable recommendations to remediate issues effectively.
Responsive & Adaptable – Their team was quick to address any evolving requirements, demonstrating flexibility and a deep understanding of security best practices.
Strong Communication & Transparency – They ensured we were informed at every stage of the engagement, making technical insights easy to understand for all stakeholders.
Minimal Disruption, Maximum Impact – Their testing process was seamless, ensuring business continuity while delivering high-impact security improvements.

Are there any areas for improvement or something DeepStrike could have done differently?

DeepStrike delivered a highly professional and thorough engagement. One potential improvement could be offering a knowledge-sharing session or best practices workshop for internal teams after the assessment. This would help enhance security awareness and empower teams to proactively mitigate future risks. Again, this is down to our own priorities during that time.

BACKGROUND

Please describe your company and position.

 I am the Head of Engineering of a healthcare services company.

Describe what your company does in a single sentence.

Our company helps small businesses offer affordable and flexible health benefits to their employees.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Pentest

SOLUTION

How did you find DeepStrike?

Online Search

Why did you select DeepStrike over others?

• Good value for cost
• Company values aligned

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

DeepStrike's comprehensive approach to penetration testing far exceeded our expectations. Their team conducted an in-depth assessment that not only identified vulnerabilities but also provided clear, actionable recommendations to bolster our security framework. The level of expertise and professionalism demonstrated throughout the process was exceptional, with every detail meticulously addressed. Furthermore, the project was delivered promptly, ensuring that our operations experienced minimal disruption while we implemented the necessary security enhancements. For organizations seeking reliable and cutting-edge cybersecurity solutions, DeepStrike stands out as a trusted partner dedicated to delivering superior results.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

DeepStrike's penetration test ensured our users' data was secure from the very beginning. It also fostered a culture that values balancing new feature development with regular security audits, establishing a robust foundation for ongoing risk management and innovation.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike demonstrated outstanding project management throughout the engagement. They adhered to the agreed-upon timeline and delivered all assessments and reports promptly, ensuring minimal disruption to our operations. Their team was highly responsive to our needs, proactively addressing any concerns and providing clear, detailed explanations at every stage of the process. Their structured approach made it easy to track progress, and their commitment to transparency fostered a strong sense of trust. Overall, DeepStrike’s professionalism and efficiency made for a seamless and highly effective collaboration.

What was your primary form of communication with DeepStrike?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about DeepStrike was their hands-on approach to penetration testing. Unlike many firms that rely heavily on automated tools, DeepStrike emphasized manual testing techniques to uncover vulnerabilities that might otherwise go undetected. Their team skillfully simulated real-world attack scenarios, mimicking the tactics of sophisticated threat actors to provide a truly comprehensive security assessment. This method not only delivered more accurate results but also gave us deeper insights into potential weaknesses and how attackers might exploit them. Their meticulous attention to detail and commitment to realistic testing set them apart as a top-tier cybersecurity partner.

Are there any areas for improvement or something DeepStrike could have done differently?

DeepStrike delivered exceptional penetration testing services with a meticulous and hands-on approach. However, one area for improvement would be better integration with issue-tracking or project management tools like Linear. Having a direct integration would streamline the process of logging, prioritizing, and addressing vulnerabilities, making it easier for engineering teams to act on findings within their existing workflows. This would enhance collaboration, ensure security tasks remain visible alongside other development priorities, and ultimately lead to faster resolution of security issues. Implementing this improvement would further solidify DeepStrike’s already impressive service offering.

BACKGROUND

Please describe your company and position.

I am the Director of Engineering of Getmyboat

Describe what your company does in a single sentence.

Markeplace boat rentals

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Pentest
• Cyber Security monitoring and testing
• Dark web monitoring

SOLUTION

How did you find DeepStrike?

Reached out to us

Why did you select DeepStrike over others?

• Pricing fit our budget
• Good value for cost
• Great expertise and solutions

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Review of Our Experience with DeepStrike

Our organization has partnered with DeepStrike to bolster our cybersecurity measures, particularly in the areas of penetration testing and application security testing.

Penetration Testing

DeepStrike's team conducted a thorough penetration test of our systems, employing manual techniques that went beyond automated tools. This meticulous approach allowed them to identify vulnerabilities that might have otherwise been overlooked. The real-time reporting feature enabled our IT team to address issues promptly, significantly reducing potential security risks.

Application Security Testing

For our suite of applications, DeepStrike perform ongoing comprehensive security assessments. Their experts simulated real-world attacks to evaluate our applications' resilience, providing detailed reports with actionable recommendations. This proactive approach has been instrumental in enhancing the security posture of our applications.

Dark Web Monitoring

DeepStrike's Dark Web monitoring service has been invaluable in helping us proactively identify and mitigate potential security threats. By continuously scanning for exposed credentials, leaked data, and emerging risks, DeepStrike enables us to stay ahead of potential breaches before they escalate. Their comprehensive approach provides the visibility and insights needed to strengthen our security posture and protect our organization from evolving cyber threats.

Conclusion

DeepStrike has proven to be a valuable partner in our cybersecurity efforts. Their expertise, combined with a commitment to continuous improvement and real-time collaboration, has significantly strengthened our defenses against potential threats. We highly recommend their services to organizations seeking a robust and proactive approach to cybersecurity.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Dark Web Monitoring
Early Threat Detection: Identified and mitigated leaked credentials before they could be exploited.
Risk Reduction: 
2. Penetration Testing
Vulnerability Reduction: Addressed high-risk vulnerabilities discovered during testing, strengthening overall security.
Security Patch Effectiveness: Improved remediation time, reducing the average time to fix critical 
3. Application Security Testing
Increased Code Security: Reduced security vulnerabilities  through pre-deployment testing.
Enhanced Resilience: Strengthened authentication and data protection.
Overall, DeepStrike’s services have helped us proactively secure our systems, reduce security risks, and accelerate our response to potential threats, demonstrating clear progress in our cybersecurity posture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

 DeepStrike’s project management was highly efficient, ensuring all deliverables were met on time. Their team was responsive, proactive, and adaptable to our needs, providing clear communication and actionable insights throughout the engagement. Their structured approach made the entire process seamless, from initial assessments to final remediation support.

What was your primary form of communication with DeepStrike?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their approach to security testing where they try and find issues manually and not just using automated tools. Their Darkweb monitoring solution is also very unique and valuable.

Are there any areas for improvement or something DeepStrike could have done differently?

None that I can think off.

BACKGROUND

Please describe your company and position.

I am the Director of Product Engineering of Matroid

Describe what your company does in a single sentence.

Our no-code platform enables non-technical users to create and deploy custom computer vision models. 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Run a penetration test in our product's UI and APIs
• Verify that application configuration was accurate from a security perspective

SOLUTION

How did you find DeepStrike?

Direct reach out from DeepStrike

Why did you select DeepStrike over others?

• Pricing fit our budget
• Good value for cost
• Reached out to us with a valid vulnerability

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We ran a two week penetration test in our staging environment probing our UI and APIs for vulnerabilities. The applications is fairly large and complex: ~7 distinct product areas and a couple hundred API endpoints. 

We used Deepstrike to manually test all of this for exploits against OWASP and a variety of other standards. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Deepstrike discovered several vulnerabilities at different severity levels. Many of the vulnerabilities had been missed by more expensive, name-brand vendors in the past. 

Remedying the discovered vulnerabilities have helped maintain a stronger security posture and pass other security audits more easily. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project was very well managed. After sharing a bit of information about our test environment and product, the pentest kicked off quickly. The Deepstrike team was communicative throughout, reporting vulnerabilities as they were discovered, and asking clarifying questions about product functionality and potential blockers over Slack. The portal for viewing vulnerabilities was easy to use, and Deepstrike testers were thorough and clear in their vulnerability descriptions and reproduction steps. 

Fixes where verified quickly a few weeks after the initial tests, and reports were delivered on time. 

What was your primary form of communication with DeepStrike?

Email or Messaging App

What did you find most impressive or unique about this company?

I was impressed by the quality of the test, the value, and the overall ease of the project: 

Quality: several experienced testers were active on the project. Based on internal monitoring and the vulnerabilities reported, it was clear that they were significantly more thorough than past vendors in their testing, exploring even niche APIs and corners of the product. They caught some significant but nuanced issues that others had missed. 

Value: given the quality of the test, the overall value was great. I felt our product got more attention for  a significantly lower price compared to vendors we had used in the past.

Ease: we've been able to kick off our tests with DeepStrike within a few days when we were quoted months of backlog by other vendors. Communication was prompt and efficient throughout our tests. I was also impressed by the thoroughness of the team; we have a fairly complex product, but the Deepstrike team had great coverage despite minimal guidance. 

Are there any areas for improvement or something DeepStrike could have done differently?

Nothing comes to mind; I'm quite happy with the results and process. 

BACKGROUND

Please describe your company and position.

I am the Co-Founder and CTO of Archon Systems Inc.

Describe what your company does in a single sentence.

We do inventory and order management as a service

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DeepStrike to accomplish?

• Penetration testing for SOC2 compliance
• Ad-hoc cybersecurity testing of new features
• Verification of security fixes

SOLUTION

How did you find DeepStrike?

Referral

Why did you select DeepStrike over others?

• Great culture fit
• Good value for cost
• Company values aligned
• Trust in their expertise

How many teammates from DeepStrike were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

DeepStrike provided penetration testing services for our software-as-a-service product.  They gave a clear, concise, and comprehensive report explaining the vulnerabilities found, guidance of how to fix them, and verified the fixes once they were in.  We have now engaged DeepStrike with the continuous penetration testing services they offer, allowing us to consult their expert team and have them test new features for vulnerabilities before they launch, keeping us and our customers safe.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Numerous security vulnerabilities found and corrected during penetration testing
• Ongoing cybersecurity services preventing future vulnerabilities
• Letter of attestation for SOC2 compliance

Describe their project management. Did they deliver items on time? How did they respond to your needs?

DeepStrike was extremely quick and thorough with their work, exceeding our expectations.  They began penetration testing and starting reporting bugs within 24 hours, and then continued the thorough penetration testing, completing it and delivering a report in 1-2 weeks.  For continuous penetration testing, they have generally been able to respond to requests within a day.

What was your primary form of communication with DeepStrike?

Email or Messaging App

What did you find most impressive or unique about this company?

DeepStrike made it obvious that they have deep expertise in Cybersecurity (I have some from working in cryptography briefly) in finding tricky vulnerabilities that others missed and in providing expert guidance.  Other penetration testing companies might request an excessive amount of information or pad out their reports with fluffy recommendations, but DeepStrike was very respectful of our time and every vulnerability that they found was significant and clearly communicated.

Are there any areas for improvement or something DeepStrike could have done differently?

None. I highly recommend DeepStrike to any software company looking to reduce their risk of security breaches.