DICEUS

BACKGROUND

Please describe your company and position.

I am the Technical Director of Badley Geoscience Ltd

Describe what your company does in a single sentence.

Software & Service provider to the international oil & gas exploration & production and CCUS industry

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire DICEUS to accomplish?

• To provide a security audit for a desktop software product
• To provide a secuity audit for our external netwok connection

SOLUTION

How did you find DICEUS?

Online Search

Why did you select DICEUS over others?

Good first impression

How many teammates from DICEUS were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

2.1.  Desktop App Penetration Testing 
File Format Vulnerabilities: 
●  Analysis of file formats (DWG, DXF, 3DS, MAX) for vulnerabilities like buffer overflows, integer overflows, 
and format string attacks. 
●  Testing for malicious code injection through file formats. 
Reverse Engineering: 
●  Deep analysis of the application's binary code to identify potential vulnerabilities, including code injection, 
memory corruption, and unauthorized access. 
3D Model Security: 
●  Evaluation of security implications of 3D models, including potential for malicious code embedding. 
●  Testing for vulnerabilities in model import/export functionalities. 
Licensing and Protection: 
●  Assessment of the strength of licensing mechanisms to prevent unauthorized use and piracy. 
●  Testing for vulnerabilities in license management that could lead to unauthorized access. 
Data Handling: 
●  Analysis of how sensitive data (e.g., project data, user preferences) is stored, processed, and transmitted. 
●  Testing for vulnerabilities in data encryption, storage, and transmission. 
Network Communication: 
●  Inspection of network traffic for vulnerabilities like man-in-the-middle attacks, data interception, and weak 
encryption. 
●  Testing for vulnerabilities in communication protocols used by the applications. 
Plugin and Add-on Security: 
 
 
Page 2 of 4 
 
●  Evaluation of the security of third-party plugins and add-ons. 
●  Testing for vulnerabilities in plugin management and execution. 
User Interface (UI) Testing: 
●  Testing for vulnerabilities like input validation, cross-site scripting (XSS), and buffer overflows in the UI. 
Code Analysis:  Conduct  a  thorough  review  of  the  application's  source  code  to  identify  potential  vulnerabilities, 
including: 
●  Input validation flaws (SQL injection, command injection, buffer overflows, XSS) 
●  Authentication and authorization issues 
●  Improper error handling 
●  Sensitive data exposure 
●  Insecure cryptographic practices 
●  Third-party library vulnerabilities 
Coding Standards Compliance: Assess adherence to secure coding practices and standards. 
Static Analysis Tool Usage: Employ static analysis tools to automate code scanning and identify potential issues. 
Code Analysis: Analyze the application's binary code to identify potential vulnerabilities, including code injection, 
memory corruption, and unauthorized access. 
 
2.2.  External Network Penetration Testing: 
●  Open-source intelligence 
●  Manual testing and exploitation of targets. 
●  Search emails/users/pass in breach databases 
●  Password spraying guessing and brute force on login portals 
●  Escalate access from external to internal 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1) Initial  Report  -  Screenshots  and  Video  Proof  of 
Vulnerability (PoV) and detailed description of how to 
reproduce security defect for QA team and Developers; 
Vulnerabilities ranked by Risk level, CVSS v.3 rank 

2) Presentation and demo that represent key findings 

3) Remediation  recommendations  and  Technical 
references 

4) 2-3  days  free  remediation  testing  (no  later  than  2 
months after delivery of the report) 

5) Letter of Attestation - brief letter confirming the testing 
performed and outlining the scope, methodology, etc. 
of  the  testing  upon  completion  of  the  engagement 
(after retesting if applicable) 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Thw two parts of the project (external network testing and application testing) were undertaken by different teams. The project procedure and deliverables were agreed and made clear from the outset. All queries both during project definition and execution were answered promply and professionally. 

What was your primary form of communication with DICEUS?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Our initial concerns before we engaged Diceus were to find a company able to perform the requried auditing and testing procedures on or software. Diceus were able to adapt their testing procedure for the unique nature of our desktop application and had access to personnel who were able to understand its complexities. 

Are there any areas for improvement or something DICEUS could have done differently?

DICEUS performed all prescribed tasks very well and to our satisfaction. During the testing procedure we expected there might be more updates/queries from Diceus regarding their process so it was difficult to ascetain the daily progress while the testing was being undertaken. Though not essential it may have been useful to have more fine-grained progress information.

BACKGROUND

Please describe your company and your position there.

I am the head of the installation service, which is engaged in connecting customers to the Internet and supporting customers.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire DICEUS, and what were your goals?

We needed to develop a mobile application, with the help of which craftsmen in real time received tasks, saw the necessary information about the equipment, could call each other and customers through the telephony system, and many other functions.

SOLUTION

How did you select this vendor and what were the deciding factors?

We were looking for a local developer in Ukraine. Personal communication with the company became decisive.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

The project was divided into 6 stages:

1. First, the company conducted research on our request. The research took about a month.
2. After research, a detailed development plan was developed and agreed upon.
3. The plan provided for 4 stages of development. This information is personal and not for disclosure.

How many resources from the vendor's team worked with you, and what were their positions?

The project was worked on by:

• Project manager
• Business analyst
• UI graphic designer
• The application was developed by 3 Android developers
• 2 developers worked on the back-end part.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

More than 500 of our employees use the application. A convenient UI as well as a well-developed back-end made it possible to use the application not only for installers, but also for a number of other employees. You can confirm this by looking at reviews and the number of downloads in the market.

Describe their project management style, including communication tools and timeliness.

All tasks are discussed with the customer before execution. The progress of the implementation of a certain part of the project could be monitored online on the dashboard. In case of questions or changes, the project manager always gave instant feedback.

What did you find most impressive or unique about this company?

I liked the fact that all stages were performed on time, and the correction of errors took from several hours to 1-2 days.

Are there any areas for improvement or something they could have done differently?

It would be good to improve the work of business analysts so that they process the information provided to them in more detail. This would avoid some unpleasant moments.

BACKGROUND

Please describe your company and your position there.

UNIQA Insurance Company (non-life insurance) has operated in Ukrainian market since 1994 and has been a member of UNIQA Insurance Group since 2006. For many years, the company has stably remained the leader in the insurance market of Ukraine. UNIQA Insurance is a universal insurer and provides insurance solutions for corporate and individual clients. For many years the company is in TOP-3 insurers in Ukraine and has a nationwide sales network. I’m the Board Member of UNIQA insurance.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire DICEUS, and what were your goals?

UNIQA contacted DICEUS for professional assistance in mobile app development. The main goal was to improve customer engagement through the mobile app.

SOLUTION

How did you select this vendor and what were the deciding factors?

We had many business goals standing behind the project, and we required someone who could do all that. Our ideal vendor had to have experience in the insurance/insurtech sector, strong technological and UX expertise. So, we’ve chosen DICEUS because they had all that.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

The project was divided into two significant milestones — the discovery phase and the development stage. Firstly, DICEUS needed to analyze customers journeys and generate hypotheses about UNIQA’s clients. For that, interviews with users were conducted, user personas identified, and user journeys created.

Based on the findings of the discovery phase, the DICEUS team formalized requirements for the new mobile app development and created the mock-ups. Secondly, the development phase is planned for iOS and Android mobile apps.

How many resources from the vendor's team worked with you, and what were their positions?

4 people (UI/UX Expert, Business Analyst, Solution Architect, Product Manager)

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

Based on the findings of the discovery phase, the DICEUS team formalized requirements for the new mobile app development and created the mock-ups.

Describe their project management style, including communication tools and timeliness.

Our project was managed by a professional Project Manager who continuously provided us with regular updates on the progress. We always knew what was done, what things need to be done, what information was required from our side and so on. So, the workflow was quite effective.

What did you find most impressive or unique about this company?

We were impressed by the depth of the UX analysis they did in terms of our customer's research, buyer persona creation, user journey mapping, etc. All the information like research findings, for instance, was presented in a clear form (presentations, Miro boards, clear infographics) so it was quite easy to understand what we need to build and why.

Are there any areas for improvement or something they could have done differently?

Not really

BACKGROUND

Please describe your company and your position there.

I'm the Director of Special Initiatives for a US-based non-profit providing place-based public health training, technical assistance, and SaaS technology to enhance client capacities.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire DICEUS?

We're obligated to ensure the security and integrity of client data. As part of this obligation, we're required to conduct and report on third party penetration tests. We'd asked DICEUS to prepare us for these tests. We'd also completed a significant third party software build and needed an objective review of the code for vulnerability.

SOLUTION

How did you select this vendor and what were the deciding factors?

DICEUS was a strong bidder and finalist contender for the significant software build. We've been in contact periodically since that bidding exercise

Describe the project in detail and walk through the stages of the project.

Objective review of significant third party software build for vulnerability. "Friendly" penetration testing to identify vulnerability.

How many resources from the vendor's team worked with you, and what were their positions?

Various talent pools including security architects, senior designer/developers, systems analysts, and project management.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Objective, candid dialog and genuine interest in our use case, our business requirements, and our technical architecture. Objective, candid dialog concerning the integrity of our code build. Relevant summary upon conclusion of the project.

How effective was the workflow between your team and theirs?

Very effective despite armed conflict in Ukraine, displacement of key people across geographies, and the inevitable confusion of assembling a team during a highly challenged environment

What did you find most impressive or unique about this company?

I was impressed with their maturity, professionalism, efficiency, perspective, and experience.

Are there any areas for improvement or something they could have done differently?

None

BACKGROUND

Please describe your company and your position there.

I am a engineering manager in a tech company providing consulting and development services. We specialize in enterprise database implementation, deployment, and migration.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus, and what were your goals?

We were looking for people with strong expertise in Amazon Web Services, custom development, and testing. Our project goal was to create a new solution for Amazon that will optimize the services for end-users.

SOLUTION

How did you select this vendor and what were the deciding factors?

When we searched for the required expertise, we first paid attention to those vendors that had experience with database, API, AWS. When we contacted DICEUS, they demonstrated their portfolio and were able to show the relevant experience.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

Our solution had to offer API-based calculations and a particular pattern for assessment. Before the beginning of the design and development phase, DICEUS team members collected all the requirements and held a series of brainstorming sessions with us. Afterward, they presented a detailed project roadmap so that we knew how they would develop the solution step by step.

How many people from the vendor's team worked with you, and what were their positions?

We hired 3 tech specialists with AWS, Kotlin, and Java expertise.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

As a result of our cooperation with the DICEUS developers, we integrated the new module into the AWS console. IT allows people to calculate the cost of database migration. The project lasted for around a year, and we were glad to have implemented the solution successfully.

Describe their project management style, including communication tools and timeliness.

Our collaboration with the team was effective. We had regular meetings to discuss the project status updates and timely mitigate any risks.

What did you find most impressive or unique about this company?

DICEUS offered us the detailed project roadmap that included the WBS and timeline — that’s what we do ourselves and expect from our partners. Their excellent understanding of the right SDLC processes and stages also added value to the table.

Are there any areas for improvement or something they could have done differently?

No, we were fully satisfied with the services.

BACKGROUND

Please describe your company and your position there.

I’m a manager of engineering in a software company specializing in custom solutions for the healthcare niche. Our company’s expertise is optimizing the workflow processes in hospitals and clinics with the help of technology.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus, and what were your goals?

We hired DICEUS .NET developers to extend our in-house team. Before we started to collaborate with DICEUS, we have had a prototype of the solution for dental clinics. Our goal was to build a web app that would automate daily operations in clinics, store electronic patient records, and help manage the entire workflow in one place. Thus, we needed several .NET developers to extend our team and proceed to the product development.

SOLUTION

How did you select this vendor and what were the deciding factors?

We looked for a software company similar to ours, with SDLC understanding, mature development processes, and healthcare expertise. Mainly, we were interested in finding .NET developers offshore. DICEUS could offer us highly-skilled resources at reasonable rates. Moreover, they had a good knowledge of the clinics’ workflow.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

Firstly, we articulated all the requirements to the new team members, and asked them to collaborate on the software architecture. They offered their vision of the project roadmap and helped us greatly resolve some technical challenges.

How many people from the vendor's team worked with you, and what were their positions?

We engaged 2 .NET developers only.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

The project was completed successfully and on time. We developed a user-friendly app that is now used by dental clinics to manage their workflows.

Describe their project management style, including communication tools and timeliness.

The guys who worked with us were available and willing to help, we had daily meetings to get status updates and be on the same page.

What did you find most impressive or unique about this company?

They offer both additional resources and end-to-end development for those who need a dedicated team. It’s comfortable as every client can find what he/she needs.

Are there any areas for improvement or something they could have done differently?

We are pleased to have worked with DICEUS developers. Nothing to add.

BACKGROUND

Please describe your company and your position there.

I’m the PM of a software company. Our SaaS solution provides design services and life-cycle assessment for the construction industry.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus, and what were your goals?

We wanted to automate the processes associated with the subscription for our software. Due to the fact that we faced a high load of subscriptions, our system required optimization. The project goals were to upgrade the subscription module, improve user experience, and new enterprise features like dashboards, billing and payment functionalities, workflows, etc.

SOLUTION

How did you select this vendor and what were the deciding factors?

We knew definitely that we needed a highly-skilled Sitecore developer to reach our project goals that’s why we were looking for specifically such a person. Our ideal candidate had to be an expert in Sitecore, .NET, and MySQL. DICEUS could offer us such expertise.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

We started with articulating our challenges and requirements for the project. We needed DICEUS to quickly study our huge codebase and proceed to the execution. I appreciate their commitment and on-time releases.

How many people from the vendor's team worked with you, and what were their positions?

Only 1 person from the DICEUS side was involved in the development for around 6 months.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

The project was completed on time, and we’ve got an upgraded web app with an automated subscription module, billing, workflows, and more. As a result, we also benefited from the increasing number of users and reduced manual effort.

Describe their project management style, including communication tools and timeliness.

The collaboration was effective: we regularly discussed the progress, got consulting on the technical issues, though together how we could improve the functionalities.

What did you find most impressive or unique about this company?

DICEUS managed to offer the required expertise in the shortest time possible. We were impressed by their good understanding of SDLC processes and level of service.

Are there any areas for improvement or something they could have done differently?

We were fully satisfied with the services provided.

BACKGROUND

Please describe your company and your position there.

I’m a PM at the company providing high-end software and hardware solutions for businesses to manage their assets like finance, staff, inventory, etc. Our solutions are powered with the latest IoT technology to offer quite a different approach to business efficiency.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus?

We searched for .NET experts, with experience in the retail niche in particular.

What were your goals for this project?

Our project goal was to create a new feature-rich mobile app for retail management, based on .NET microservices.

SOLUTION

How did you select Diceus?

We looked through different custom software development vendors on Clutch and found DICEUS. When we contacted them, they provided quick feedback on our inquiry. Then they demonstrated relevant cases and provided their vision on the project.

Describe the project in detail.

The project started with business analysis and requirements capture, followed by design and prototyping. Next, DICEUS developers proceeded to the main part of the project – development and testing. Finally, it ended with a successful launch after 6 months.

What was the team composition?

2 developers from the DICEUS side were involved in the development.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The project was successfully accomplished and we’ve got all the features expected: license-plate recognition, online orders, CCTV automation, and device connection. Thanks to the project implementation, we managed to offer better business automation, simpler management, and centralized access capabilities for retail stores – the major users of our solution.

How effective was the workflow between your team and theirs?

From the very beginning of our collaboration with DICEUS we agreed on the general project workflow, communication plan, and reporting. We’ve had regular weekly meeting when DICEUS presented us with the sprint releases and reported on the progress.

What did you find most impressive about this company?

The way they precisely adhered to our agreements and timely reporting were the things that impressed us most. It’s hard to find a reliable vendor nowadays.

Are there any areas for improvement?

We liked the team and the company in general.

BACKGROUND

Please describe your company and your position there.

I am a CTO at a tech company providing secure payment solutions for retail and e-commerce niches. We build POS systems, payment modules, help improve chargeback management, cash discounts, as well.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus, and what were your goals?

We searched for Magento specialists and cloud technology experts to help us optimize the solution. These people had to quickly get a handle on the situation and proceed to the development stage. We’ve already had an API for credit card payments that needed to be optimized as it failed to function as expected.

SOLUTION

How did you select Diceus and what were the deciding factors?

We chose DICEUS as they had relevant experience with payment gateways and other payment solutions for e-commerce. Initially, we’ve had a shortlist of 3 vendors, but DICEUS was the fastest with their proposal. Besides, they have a reasonable schedule and costs as compared to the other vendors.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

Our collaboration started with several meetings when we explained what we needed to improve in our solution. First, we talked about the reasons why our payment solution didn't work appropriately and what problems to business it caused.

DICEUS team offered their approach to solve the issues, they came up with a technology stack and a detailed project roadmap. The workflow was smooth and we’ve got the deliverables as agreed.

How many people from the vendor's team worked with you, and what were their positions?

3 DICEUS developers worked with us.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

Today, our Magento payment module works as expected. The DICEUS team also helped us expand the number of supported gateways, including Stripe, NMI, and Authorize.net. The transaction statuses can also be monitored by admins.

Describe their project management style, including communication tools and timelines.

We liked the way we collaborated, DICEUS members worked like a dedicated team. They were always available when we wanted to discuss the status, issues, or just ask for advice.

What did you find most impressive or unique about this company?

They really care about the project results as if it were their business. We were impressed by their commitment and dedication.

Are there any areas for improvement or something they could have done differently?

They performed well from all sides.

BACKGROUND

Please describe your company and your position there.

Our company is a blockchain-focused IT business that created a web-based platform for binary options. I’m an IT director there.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Diceus, and what were your goals?

As an IT Director, I was responsible for creating the platform from scratch. We were looking for an experienced software provider with a strong background in the blockchain. Our goal was to build a solution allowing to calculate rates transparently and easily. The new calculation model we wanted to introduce could increase the users’ trust in the marketplaces.

SOLUTION

How did you select Diceus and what were the deciding factors?

We’ve already had some experience hiring Ukrainian development companies and were satisfied with them. However, this time we were looking for specific skills and chose DICEUS as they had those.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

As described, we wanted to create a next-gen rate calculation tool for binary options on cryptocurrencies. Such a tool is an excellent way to increase trust between users and marketplaces.

The latter could gain added values such as increased loyalty and profits. DICEUS offered us the relevant technology stack, including Angular, Java, Spring, Solidity, etc. The choice of technologies was backed up by their experience in developing similar projects.

First off, they conducted business analysis and gathered all the requirements we had. Once all the specifications were approved from our side, they started the development that lasted for 9 months.

How many people from the vendor's team worked with you, and what were their positions?

The team composition was 6 members, which included a business analyst, a project manager, one test engineer, one backend developer, one frontend developer, and a designer.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

The final product has high performance and is very secure. It is trusted by thousands of users. The betting process has become easier which improved customer satisfaction greatly.

Describe their project management style, including communication tools and timelines.

The team performed nicely from the project management standpoint: we were introduced the communication plan, according to which we had regular weekly and monthly meetings with the team. They provided reports and metrics which helped us track the project progress and requirements met.

What did you find most impressive or unique about this company?

They do great work combining their technical expertise and the level of service.

Are there any areas for improvement or something they could have done differently?

Nothing to say, they coped with our tasks successfully.