Karacena

BACKGROUND

Please describe your company and position.

I am the principal of Primary School No. 381 named after KK Baczyński

Describe what your company does in a single sentence.

Education. I am the principal of Primary School No. 381 named after K.K. Baczyński in Warsaw. The school educates students in grades 1-8 and employs several dozen people. As principal, I am responsible for, among other things, school organization and student safety, including cybersecurity activities.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Training
• More information
• Responsibility

SOLUTION

What specific goals or objectives did you hire Karacena to accomplish?

• Training
• More information
• Responsibility

SOLUTION

How did you find Karacena?

• Referral
• Clutch Site

Why did you select Karacena over others?

Good value for cost

How many teammates from Karacena were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Karacena conducted a two-hour training session for 35 teachers in May 2026. The program included: recognizing phishing and smishing with practical exercises based on examples, a step-by-step procedure for responding to a student report, including information on who to report the matter to and in what order, and a section on cyberbullying and grooming, clearly indicating where the teacher's role ends and what they should do next. After the training, each participant received a package of materials: a card ready to use in class with students, a framework for incident procedures to be completed by the school, and a list of external resources.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The incident procedure framework provided by Karacena became the basis for developing the school's documentation in this area. Teachers now know what to say to a student who reports an online issue and what to do next. A card with the three cybersecurity myths was distributed to several classes for homeroom hours. The training was well-prepared – the instructor was familiar with the specifics of school work and spoke to teachers in understandable, non-technical language. Implementation was timely and as agreed.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

I wanted teachers to know what to do when a student reports an online problem—how to talk to them, who to escalate the issue to, and how to distinguish between situations requiring an urgent response and those that can be discussed calmly. We lacked practical knowledge and a ready-made procedure. I was looking for specific training—not lecture-based—that would conclude with materials for use in the classroom, not just slides.

What was your primary form of communication with Karacena?

In-Person Meeting

What did you find most impressive or unique about this company?

Professional cybersecurity training for the teaching staff - they were practical and well-prepared.

Are there any areas for improvement or something Karacena could have done differently?

The only area for development could be an additional version of the materials for schools that would like to independently revisit the topic during short meetings with teachers after the training. The training itself was very well conducted, but such a refresher package would facilitate the implementation of the knowledge in subsequent weeks.

BACKGROUND

Please describe your company and position.

 I am the Senior Director, Information Security of an information technology company 

Describe what your company does in a single sentence.

We enable IT providers to lead with confidence by unifying innovation, automation, and community—driving secure, scalable, and profitable growth.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Build and Implement a global Threat Hunting function within the Information Security group.
• Build and Implement a global Red Teaming function within the Information Security group.

SOLUTION

How did you find Karacena?

Other

Why did you select Karacena over others?

• High ratings
• Referred to me
• Company values aligned

How many teammates from Karacena were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Establish the Red Team and Threat Hunting programs. Craft detailed program charters outlining business needs, organizational goals, KPIs and performance metrics for each. Then, operate and facilitate these functions and display measured risk reduction over time as well as matured program capabilities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measured and displayed risk reduction through the finding of vulnerabilities and misconfigurations. Testing the people, process and technology resposible for providing infosec capaiblities to ensure continuity and validitiy. Measured and improved program maturity over the years by selecting appropriate industry frameworks and selecting business aligned maturity goals for improvement.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Communication and project managemet were excellent throughout the duration of the project. All artifacts were properly docuement and recorded for posterity and audit. The team was able to partner cross-functionaly to accomplish remediations across the org.

What was your primary form of communication with Karacena?

Virtual Meeting

What did you find most impressive or unique about this company?

Consumate professionals with a wide breadth of knowledge and ability.

Are there any areas for improvement or something Karacena could have done differently?

They are excellent professionals who would be a valued asset to anyone who hires them.

BACKGROUND

Please describe your company and position.

I am the CTO & Co-founder of Monethic

Describe what your company does in a single sentence.

Offensive cybersecurity - red teaming, penetration testing, blockchains and smart contract auditing.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Guide and empower Client SOC
• SOC training for the Client
• Incident response handling

SOLUTION

How did you find Karacena?

Referral

Why did you select Karacena over others?

• Close to my geographic location
• Good value for cost
• Company values aligned

How many teammates from Karacena were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

As a co-owner of the pentesting/offensive cybersecurity company Monethic, I led a Purple Team exercise in 2025 for a large U.S.-based technology company with over 10,000 employees. My team handled the red team scope, designing attack scenarios and conducting privilege escalation and network infiltration simulations aligned with the MITRE ATT&CK framework.

Karacena P.S.A. joined the project to strengthen the client’s SOC and build out the Blue Team capabilities. Their team focused on threat hunting, ongoing SIEM/EDR telemetry analysis, and real-time incident response during our simulations. They worked closely with the client’s SOC on triage, escalation, and post-incident investigations. After the exercise, they delivered tailored detection rules and security policy improvements adapted to the client’s environment.

The collaboration reflected a true purple teaming approach: our offensive scenarios were immediately tested against defensive controls, with continuous feedback between teams. Karacena also conducted incident response workshops for the client’s SOC analysts, helping them improve practical skills and develop playbooks for specific threat scenarios.

As a result, MTTD was reduced by over 40% and MTTR by 30%. We identified 25 critical configuration issues, all of which were remediated within 60 days. The SOC implemented 15 new detection rules, leading to a noticeable reduction in false positives.

Karacena demonstrated solid expertise in threat hunting, incident response, and detection engineering. I would recommend them to organizations looking to run structured Purple Team engagements and strengthen their SOC capabilities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Mean Time to Detect (MTTD) was reduced by over 40% and MTTR by 30%. We identified 25 critical configuration issues, all of which were remediated within 60 days. The SOC implemented 15 new detection rules, leading to a noticeable reduction in false positives.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Karacena demonstrated outstanding expertise in threat hunting, incident response, and security policy development. Combining their defensive strengths with our offensive experience resulted in a true Purple Team engagement that enabled the client to understand its weaknesses and significantly improve its security posture.

What was your primary form of communication with Karacena?

Virtual Meeting

What did you find most impressive or unique about this company?

They combined hands-on threat hunting and incident response expertise with a practical understanding of real-world attack techniques, which made the collaboration during the Purple Team exercise particularly effective.

Are there any areas for improvement or something Karacena could have done differently?

Nothing significant - the engagement met expectations.

BACKGROUND

Please describe your company and position.

I am the Co-Owner of Mobipol

Describe what your company does in a single sentence.

Authorised distributor of ExxonMobil in Poland.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Karacena to accomplish?

• Assessment of the current state of company's cybersecurity
• Enhancing cybersecurity in the organization

SOLUTION

How did you find Karacena?

Referral

Why did you select Karacena over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Referred to me

How many teammates from Karacena were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The cybersecurity audit conducted in our organization aimed to assess the current level of organizational and technical safeguards, identify key risk areas, and verify compliance with best practices in information security.

The scope of the audit included both organizational and technical aspects related to the processing, storage, and protection of information—such as IT asset management, policies and procedures, physical security, employee awareness, backups, system updates, access management, and incident response.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Audit report that embraced 29 control points.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The audit was conducted professionally and efficiently, and the collaboration was smooth and constructive throughout.

We particularly appreciated the high quality of the final report – it was clear, logically structured, and understandable even to those without an IT background. The recommendations provided were precise and prioritized, enabling us to take swift and effective corrective actions.

The audit gave us valuable insight into areas requiring improvement and serves as a strong foundation for further enhancing our organization's security posture.

What was your primary form of communication with Karacena?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most about this company was their high level of professionalism, both in terms of expertise and organizational culture. The project was carried out efficiently and completed on time, exactly as agreed. Their commitment, responsiveness, and clear communication made the entire collaboration smooth and highly effective.

We particularly appreciated the high quality of the final report – it was clear, logically structured, and understandable even to those without an IT background. The recommendations provided were precise and prioritized, enabling us to take swift and effective corrective actions.

Are there any areas for improvement or something Karacena could have done differently?

No, we recommend this company to anyone interesting in enhancing cubersecurity in their organization.