Karacena

BACKGROUND

Please describe your company and position.

I am the CTO & Co-founder of Monethic

Describe what your company does in a single sentence.

Offensive cybersecurity - red teaming, penetration testing, blockchains and smart contract auditing.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Guide and empower Client SOC
• SOC training for the Client
• Incident response handling

SOLUTION

How did you find Karacena?

Referral

Why did you select Karacena over others?

• Close to my geographic location
• Good value for cost
• Company values aligned

How many teammates from Karacena were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

As a co-owner of the pentesting/offensive cybersecurity company Monethic, I led a Purple Team exercise in 2025 for a large U.S.-based technology company with over 10,000 employees. My team handled the red team scope, designing attack scenarios and conducting privilege escalation and network infiltration simulations aligned with the MITRE ATT&CK framework.

Karacena P.S.A. joined the project to strengthen the client’s SOC and build out the Blue Team capabilities. Their team focused on threat hunting, ongoing SIEM/EDR telemetry analysis, and real-time incident response during our simulations. They worked closely with the client’s SOC on triage, escalation, and post-incident investigations. After the exercise, they delivered tailored detection rules and security policy improvements adapted to the client’s environment.

The collaboration reflected a true purple teaming approach: our offensive scenarios were immediately tested against defensive controls, with continuous feedback between teams. Karacena also conducted incident response workshops for the client’s SOC analysts, helping them improve practical skills and develop playbooks for specific threat scenarios.

As a result, MTTD was reduced by over 40% and MTTR by 30%. We identified 25 critical configuration issues, all of which were remediated within 60 days. The SOC implemented 15 new detection rules, leading to a noticeable reduction in false positives.

Karacena demonstrated solid expertise in threat hunting, incident response, and detection engineering. I would recommend them to organizations looking to run structured Purple Team engagements and strengthen their SOC capabilities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Mean Time to Detect (MTTD) was reduced by over 40% and MTTR by 30%. We identified 25 critical configuration issues, all of which were remediated within 60 days. The SOC implemented 15 new detection rules, leading to a noticeable reduction in false positives.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Karacena demonstrated outstanding expertise in threat hunting, incident response, and security policy development. Combining their defensive strengths with our offensive experience resulted in a true Purple Team engagement that enabled the client to understand its weaknesses and significantly improve its security posture.

What was your primary form of communication with Karacena?

Virtual Meeting

What did you find most impressive or unique about this company?

They combined hands-on threat hunting and incident response expertise with a practical understanding of real-world attack techniques, which made the collaboration during the Purple Team exercise particularly effective.

Are there any areas for improvement or something Karacena could have done differently?

Nothing significant - the engagement met expectations.

BACKGROUND

Please describe your company and position.

I am the Co-Owner of Mobipol

Describe what your company does in a single sentence.

Authorised distributor of ExxonMobil in Poland.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Assessment of the current state of company's cybersecurity
• Enhancing cybersecurity in the organization

SOLUTION

How did you find Karacena?

Referral

Why did you select Karacena over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Referred to me

How many teammates from Karacena were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The cybersecurity audit conducted in our organization aimed to assess the current level of organizational and technical safeguards, identify key risk areas, and verify compliance with best practices in information security.

The scope of the audit included both organizational and technical aspects related to the processing, storage, and protection of information—such as IT asset management, policies and procedures, physical security, employee awareness, backups, system updates, access management, and incident response.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Audit report that embraced 29 control points.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The audit was conducted professionally and efficiently, and the collaboration was smooth and constructive throughout.

We particularly appreciated the high quality of the final report – it was clear, logically structured, and understandable even to those without an IT background. The recommendations provided were precise and prioritized, enabling us to take swift and effective corrective actions.

The audit gave us valuable insight into areas requiring improvement and serves as a strong foundation for further enhancing our organization's security posture.

What was your primary form of communication with Karacena?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about this company was their high level of professionalism, both in terms of expertise and organizational culture. The project was carried out efficiently and completed on time, exactly as agreed. Their commitment, responsiveness, and clear communication made the entire collaboration smooth and highly effective.

We particularly appreciated the high quality of the final report – it was clear, logically structured, and understandable even to those without an IT background. The recommendations provided were precise and prioritized, enabling us to take swift and effective corrective actions.

Are there any areas for improvement or something Karacena could have done differently?

No, we recommend this company to anyone interesting in enhancing cubersecurity in their organization.