Ebryx

BACKGROUND

Please describe your company and position.

I am the Manager of a telecommunications company 

Describe what your company does in a single sentence.

ISP and VAS services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• CTDISR Audit

SOLUTION

How did you find Ebryx?

Online Search

Why did you select Ebryx over others?

• High ratings
• Pricing fit our budget

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work included a comprehensive statutory cyber security audit of Nayatel’s critical telecommunications infrastructure. Ebryx conducted an in-depth assessment to identify potential vulnerabilities, evaluated compliance with industry security standards, and performed rigorous penetration testing. The engagement also involved reviewing network architecture, security controls, and incident response mechanisms to ensure resilience against cyber threats. Based on the findings, Ebryx provided detailed recommendations and remediation strategies to enhance the overall security posture of the infrastructure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project resulted in  improvements in Nayatel’s cybersecurity posture. Key measurable outcomes included the identification  of critical vulnerabilities, ensuring compliance with industry security standard. The audit led to a 30% improvement in overall security resilience.Additionally, the implementation of Ebryx’s recommendations reduced the risk of security breaches and improved incident response capabilities, strengthening Nayatel’s ability to safeguard its critical telecommunications infrastructure.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx demonstrated excellent project management throughout the engagement, ensuring a structured and efficient audit process. Their team maintained clear and consistent communication, providing regular updates on progress, key findings, and next steps. They adhered to a well-defined timeline, meeting all project milestones without delays. The team was highly responsive to queries and proactive in addressing concerns, ensuring a smooth collaboration. Their systematic approach, combined with in-depth technical expertise, allowed for the successful completion of the audit with actionable insights and minimal disruption to operations.

What was your primary form of communication with Ebryx?

In-Person Meeting

What did you find most impressive or unique about this company?

Ebryx impressed us with their timeliness, responsiveness, and efficient query handling. They ensured a smooth and well-managed audit process.

Are there any areas for improvement or something Ebryx could have done differently?

None

BACKGROUND

Please describe your company and position.

I am the CISO of Pakistan MNP Database (G) Ltd.

Describe what your company does in a single sentence.

Providing ICT and KYC services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Risk Identification and Mitigation
• Security Enhancement
• Regulatory Compliance

SOLUTION

How did you find Ebryx?

Referral

Why did you select Ebryx over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Ebryx to conduct a statutory cybersecurity audit of our critical telecommunications infrastructure, in compliance with PTA CTDISR regulations. The goal was to assess our security posture, identify vulnerabilities, and ensure regulatory compliance.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The audit helped us identify key security gaps and areas for improvement in our infrastructure. Ebryx’s expert recommendations enabled us to strengthen our security controls, ensuring compliance with PTA CTDISR requirements. As a result, we improved our overall cybersecurity posture and mitigated potential risks.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx demonstrated a structured and efficient project management approach throughout the engagement. Their team followed a well-defined process that included clear communication, timely updates, and a systematic execution of tasks.

What was your primary form of communication with Ebryx?

• In-Person Meeting
• Virtual Meeting

What did you find most impressive or unique about this company?

What impressed us about Ebryx was their deep cybersecurity expertise, professionalism, and commitment to excellence. Their team demonstrated a strong understanding of regulatory compliance, risk assessment, and security best practices, ensuring a thorough and insightful audit process.

Are there any areas for improvement or something Ebryx could have done differently?

Overall, our experience with Ebryx was excellent, and their team demonstrated strong expertise and professionalism. However, one area for potential improvement could be expanding post-audit support by offering more hands-on assistance in implementing security recommendations. While their detailed reports were highly valuable, additional guidance on execution could further enhance the overall impact of the audit.

BACKGROUND

Please describe your company and position.

I am the Global Director of Support Services of an IT company 

Describe what your company does in a single sentence.

We are a global company, with Staff and offices located in Uk, USA, Mexico, Canada, Denmark,Sweden and the Philippines & India

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Managed Endpoint Detection
• Incident Response Services

SOLUTION

How did you find Ebryx?

Referral

Why did you select Ebryx over others?

• High ratings
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Ebryx were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

A New York-based cybersecurity solutions provider, is offering a Managed Endpoint Detection and Response (EDR) service for customers using our EDR solution. This service is powered by Ebryx LLC, a New Hampshire-based cybersecurity services company. The Managed EDR service provides continuous, 24x7x365 monitoring, incident triage, false positive/true positive (FP/TP) analysis, alert enrichment, and quarterly reporting. Ebryx's expert security analysts monitor customer environments to detect and resolve potential threats, prioritize incidents based on impact, and offer actionable recommendations. They ensure valid alerts through rigorous analysis and adhere to service level agreements (SLAs) to resolve incidents within agreed-upon timeframes. Our partnership with Ebryx's delivers enhanced detection and response capabilities to bolster the security posture of their customers, helping protect against evolving cyber threats.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from our Managed EDR project powered by Ebryx demonstrated significant progress and success. Key performance indicators like reduced mean time to acknowledge (MTTA) and mean time to respond (MTTR) showed strong adherence to service level agreements (SLAs). Additionally, quarterly reports highlighted a notable improvement in incident detection, triage efficiency, and accurate FP/TP analysis, which effectively minimized false positives. These achievements ensured enhanced threat response times, improved security postures, and provided actionable recommendations for customers, solidifying the value and impact of the service

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management for the Managed EDR service, supported by Ebryx, was highly effective, marked by a close partnership and regular communication. They consistently delivered key items on time, adhering to the agreed-upon service level agreements (SLAs) for response and resolution times. Their team was responsive to our needs, maintaining open lines of communication to address any issues or concerns promptly. Regular updates and quarterly reports kept us informed of progress, ensuring that any adjustments or recommendations were well-coordinated. Overall, their proactive approach and commitment to collaboration greatly contributed to the project's success​

What was your primary form of communication with Ebryx?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impresses me most about Ebryx was their exceptional flexibility, responsiveness, and speed of work. They consistently adapted to our evolving needs, quickly implementing changes and addressing concerns without compromising on quality. Their ability to respond to incidents and deliver solutions in a timely manner, all while maintaining clear and effective communication, truly set them apart. This combination of agility and efficiency made working with them a seamless and highly productive experience

Are there any areas for improvement or something Ebryx could have done differently?

There is always room for improvement, and this applies to both sides of the relationship. This is why the regular 360-degree reviews of the partnership are a cornerstone to its continued success. These reviews help identify areas where processes could be optimized or communication could be enhanced, ensuring that both Ebryx and our company can maintain their high standards while evolving to meet future challenges. This proactive approach allows for continuous refinement and strengthens the collaboration over time

BACKGROUND

Please describe your company and position.

I am the Application Security Engineer of a logistics PaaS company

Describe what your company does in a single sentence.

We are a B2B tech startup founded to modernize logistics operations for businesses through its first-party apps and APIs. Our company is helping hundreds of B2B and Fortune 100 companies exceed their customer expectations by digitizing and connecting inventory, fulfillment, shipping, and receiving on one platform.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Web App Penetration Testing
• Mobile App Penetration Testing

SOLUTION

How did you find Ebryx?

Online Search

Why did you select Ebryx over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work for Ebryx included comprehensive penetration testing for both our web and mobile applications. This involved identifying and evaluating security vulnerabilities through:

• detailed reconnaissance
• scanning
• exploitation phases.

Key deliverables were:

• a thorough vulnerability report with risk assessments
• remediation recommendations
• an executive summary for high-level stakeholders.

The engagement also included follow-up meetings to discuss findings and retesting if needed.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from the project included:

• Identified Vulnerabilities: Ebryx discovered vulnerabilities (of different severity levels) across our web and mobile applications.
• Severity Levels: Provided detailed risk assessments, categorizing vulnerabilities into high, medium, and low severity.
• Remediation: Delivered actionable recommendations, enabling us to address and resolve 100% of the identified issues.
• Security Posture Improvement: Post-remediation, our security posture improved by 10%, as verified through follow-up testing.
• Compliance: Enhanced alignment with industry security standards and best practices.
• Risk Reduction: Reduced potential security risks and exposure to threats.
• Stakeholder Confidence: Increased confidence among stakeholders regarding application security.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx demonstrated strong project management by clearly defining the scope and milestones at the outset. They maintained regular communication and provided timely updates throughout the testing process. Their team adhered to the agreed-upon schedule, ensuring deliverables were met on time. Post-project, they facilitated follow-up meetings to discuss findings and address any questions.

What was your primary form of communication with Ebryx?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed me most about Ebryx was their deep technical expertise and meticulous approach to penetration testing. Their ability to communicate complex findings clearly and provide practical remediation advice stood out. Additionally, their proactive engagement and responsiveness throughout the project demonstrated a strong commitment to our security needs.

Are there any areas for improvement or something Ebryx could have done differently?

The communication could be more fast. We believe the team would be in multiple projects but sometimes it takes long to respond over emails by the team.

BACKGROUND

Please describe your company and position.

I am the Senior Manager SOC of a bank. 

Describe what your company does in a single sentence.

Our bank is one of the prominent financial institution of the country with PACRA Ratings: AA+ Long Term and A1+ Short Term.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Penetration Testing Activity
• Network Configuration Reviews

SOLUTION

How did you find Ebryx?

• Online Search
• Referral

Why did you select Ebryx over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Ebryx were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work with Ebryx included comprehensive penetration testing to identify and evaluate potential vulnerabilities within our network and systems. They conducted a thorough review of our network configuration to ensure robust security measures were in place. Their team assessed both external and internal threats, providing actionable insights and recommendations. 

Additionally, they performed detailed vulnerability assessments and risk analysis to enhance our overall security posture. The engagement aimed to fortify our defenses against potential cyber threats and ensure compliance with industry standards.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from the project included a significant reduction in identified vulnerabilities, with actionable recommendations leading to a more secure network infrastructure. Ebryx's assessment resulted in the implementation of enhanced security protocols and configurations, which improved overall system resilience. 

Their findings also helped us achieve compliance with relevant industry standards and regulations. Additionally, the bank experienced a heightened awareness of cybersecurity risks and an improved ability to proactively address potential threats.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx demonstrated excellent project management throughout our engagement. They adhered to the agreed timelines and delivered all items promptly, ensuring that each phase of the project was completed as scheduled. Their team maintained clear and consistent communication, providing regular updates and addressing any issues swiftly. The efficiency and professionalism in their project management contributed significantly to the overall success of the cybersecurity assessment.

What was your primary form of communication with Ebryx?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What I found most impressive about Ebryx was their in-depth expertise and thorough approach to cybersecurity. Their team identified critical vulnerabilities and provided clear, actionable recommendations tailored to our specific needs.

Are there any areas for improvement or something Ebryx could have done differently?

While Ebryx delivered strong results overall, there are areas for improvement. Meetings with our IT department sometimes felt pressurized, which could be alleviated by fostering a more collaborative environment. Additionally, enhancing their presentation skills would improve the clarity and impact of their findings. Although their execution of the technical aspects was commendable, refining these areas would further elevate their service quality.

BACKGROUND

Please describe your company and position.

I am the Manager IT of a financial services company 

Describe what your company does in a single sentence.

Our company is a NBFC set up primarily to cater to the financial needs of middle and low-cost private Education Institutions as well as related Supply Chain entities in the Education eco-system and is the first of its kind in the whole of Pakistan.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Financial Audit
• SECP Circular 15 External Audit

SOLUTION

How did you find Ebryx?

Online Search

Why did you select Ebryx over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Ebryx recently conducted an SECP Circular 15 External Audit on our financial lending application. The audit's scope encompassed a thorough review of:

• our personnel
• processes
• technological controls to ensure compliance with regulatory standards and identify potential areas for improvement.

Key deliverables included:

• a detailed audit report
• a risk assessment
• recommendations for enhancing both security and operational efficiency. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The audit highlighted critical areas for improvement, leading to stronger security measures. As a result, our compliance with industry standards significantly improved. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx’s project management was outstanding. They delivered all deliverables on time and were highly responsive to our needs. Their team maintained clear and regular communication throughout the project, ensuring we were always informed and aligned.

What was your primary form of communication with Ebryx?

• In-Person Meeting
• Virtual Meeting

What did you find most impressive or unique about this company?

We were highly impressed by Ebryx’s thoroughness and attention to detail throughout the audit. Their ability to meticulously analyze our systems and processes stood out. Additionally, they provided practical and effective recommendations tailored to our needs. This combination of detailed assessment and actionable advice greatly benefited our operations. We look forward to collaborating with Ebryx on future projects.

Are there any areas for improvement or something Ebryx could have done differently?

Overall it was a good experience the team had been very professional and cooperative and carried our the project in timely manner. I have 1 issue that during the project resource was changes due to some reason which caused some disturbance in the workflow.

BACKGROUND

Please describe your company and position.

 I am the Head of Information Security of a Holding Company

Describe what your company does in a single sentence.

We are one of the leading companies in Pakistan that is committed to providing solutions based on advanced technology, innovation, and high quality. We have come a long way since its inception. Established in 2000, it has successfully diversified its portfolio in Pakistan, with us as the parent company. Starting from Asset Management and Tracking to Real Estate, Security Services, Venture Capital, and General Insurance. 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• CTDSIR Audit

SOLUTION

How did you find Ebryx?

• Referral
• Other

Why did you select Ebryx over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Ebryx to perform a PTA CTDISR Audit, which is a statutory cybersecurity audit of our critical telecommunications infrastructure. The objective was to ensure our systems are secure and compliant with industry standards, and to identify any vulnerabilities that could potentially be exploited by cyber threats

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from the project included a marked improvement in our cybersecurity posture, with a significant reduction in identified vulnerabilities. We achieved compliance with industry standards and regulatory requirements, enhancing our credibility and mitigating risks. Additionally, we experienced increased operational efficiency, with quicker response times to potential threats and incidents. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx approached the audit process with a high level of professionalism and thoroughness. They conducted an in-depth assessment of our infrastructure, meticulously examining each component for vulnerabilities and compliance gaps. Their team was highly collaborative, keeping us informed at every stage and providing clear, detailed reports on their findings

What was your primary form of communication with Ebryx?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about working with Ebryx was their deep expertise and their client-centric approach. They not only identified issues but also worked closely with us to implement effective solutions. Their commitment to our success and their ability to deliver clear, actionable insights set them apart from other service providers we’ve worked with.

Are there any areas for improvement or something Ebryx could have done differently?

None

BACKGROUND

Please describe your company and position.

 I am the Senior Manger of a financial services company 

Describe what your company does in a single sentence.

We're an Ed-Fintech company that provide financing to Pakistani students.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Regulatory Compliance Audit
• IT and Security Audit

SOLUTION

How did you find Ebryx?

Referral

Why did you select Ebryx over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our project entailed performing a statutory audit on financial lending application, with a key focus on assessing the effectiveness of people, processes, and technological controls. Through thorough scrutiny, Ebryx ensured adherence to regulatory standards while pinpointing areas for improvement. The audit aimed to strengthen security protocols, mitigate risks, and enhance operational efficiency within the lending application system.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes of our project included a detailed assessment report highlighting adherence to regulatory standards and pinpointing areas for improvement in the financial lending application. Ebryx Helped us in SECP Circular No. 15 Audit

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx has very professional and technically strong people. They carried out project with keen hard work and in timely manner according to the plan.

What was your primary form of communication with Ebryx?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Ebryx was up to date about industry trends and new regulatory requirements. During project, they shared pre-defined solutions and improvement for our problem and in some cases arrange call with industry people to give way forward to fix and address regulatory required with technology constraints.

Are there any areas for improvement or something Ebryx could have done differently?

Ebryx team divided project in to pre-defined steps, which included below:

1. Introductory session 
2. High level fit gap analyses 
3. Final client submission for review 
4. Incremental and Iterative Analysis and Improvement 
5. Demos of improved feature
6. Exception handling based on technology constraints 

I think Ebryx can improve by giving out detailed list of missing items that are mostly missed by industry based on new circular or regulations. Ebryx did point out some major items but sharing detailed list would help and client will be able to submit good quality in first submission.

BACKGROUND

Please describe your company and position.

 I am the Chief of Staff of a financial services company 

Describe what your company does in a single sentence.

BaadMay is a Buy Now Pay Later service, serving the Pakistani market with fintech solutions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?
Statutory audit of financial lending application

SOLUTION

How did you find Ebryx?

Referral

Why did you select Ebryx over others?

High ratings

How many teammates from Ebryx were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our engagement involved conducting a comprehensive statutory audit of financial lending applications, with a focus on assessing the effectiveness of people, processes, and technological controls.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcome for the project, aligned with SECP Circular No. 15 Audit, was a comprehensive assessment report detailing the compliance status of the financial lending application. This report provided clear insights into the effectiveness of implemented controls, highlighting areas of strength and opportunities for improvement.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they delivered the project timely. All our concerns were responded to efficiently, with appropriate details both in emails and our virtual meetings. The staff is quite cooperative in providing guidance, feedback, and suggestions to complete the project.

What was your primary form of communication with Ebryx?

Virtual Meeting

What did you find most impressive or unique about this company?

Thorough, efficient, and consistent communication with the client regarding the status of the project.

Are there any areas for improvement or something Ebryx could have done differently?

Not really, we were satisfied with their service. However, in certain cases, it may be a bit more beneficial to share possible solutions or sample work that could help bring the auditors and the company stakeholders on one page, to ensure the requirement accommodates various business models.

BACKGROUND

Please describe your company and position.

I am the information technology company of a media company

Describe what your company does in a single sentence.

An American digital media and internet company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ebryx to accomplish?

• Hire knowlegeable analysts
• Provide reliable and dedicated staff

SOLUTION

How did you find Ebryx?

Existing relationship

Why did you select Ebryx over others?

Existing relationship

How many teammates from Ebryx were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Staff and enhance our SOC. Analysts review alerts, work directly with the engineering teams at our various businesses to remdiate issues, identify and implement efficiencies in our processes.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Open vulnerability points of entry and exposure have been reduced significantly since the inception of the project. SOC processes have been developed, enhanced and efficiencies implemented by the Ebryx analysts over the course of the project lifecycle.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ebryx has a hands off approach, per our agreement, with regard to daily management of the staff. They are responsive when engaged to solve problems and always address open issues quickly and effectively. We maintain regular checkpoint meetings with their management to ensure two way communication with regard to project success.

What was your primary form of communication with Ebryx?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

While the price is certainly agreeable, Ebryx provides the same high standard of attention to our needs no matter the size of the contract.

Are there any areas for improvement or something Ebryx could have done differently?

None noted