Nexa

BACKGROUND

Please describe your company and position.

I am the Tech Lead of ORMEN

Describe what your company does in a single sentence.

Software and hardware support for the operation of national lottery games.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Nexa to accomplish?

• Security Assesment and Pentesting
• Implementation, consulting, and monitoring of databases architecture

SOLUTION

How did you find Nexa?

Referral

Why did you select Nexa over others?

• High ratings
• Close to my geographic location
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Nexa were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration testing on a new web platform in implementation. It includes exploring the application and determining the impact of a security failure on system integrity, information confidentiality, internal infrastructure, and system availability. Upon completing the analysis, a detailed report is presented indicating the findings and recommendations to mitigate all detected vulnerabilities, as well as detailing weaknesses that could be addressed to strengthen the application's security.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Detailed report with step-by-step procedures used in the tests, documenting the entire penetration process. Includes a comprehensive explanation of the identified vulnerabilities and how to resolve them.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management and follow-up were excellent, being available at all times for any doubts or queries that might arise from our side. The delivery times were respected as agreed upon.

What was your primary form of communication with Nexa?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The technical knowledge of the Nexa team was impressive, and their customer-oriented approach makes them a pleasant company to work with. They are willing to discuss the scope of projects to ensure customer satisfaction.

Are there any areas for improvement or something Nexa could have done differently?

Nothing that comes to mind at this moment.

BACKGROUND

Please describe your company and your position there.

I'm the CISO of a consumer service company, with more than 100 brsnches in Uruguay.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Nexa?

Hardening Linux servers Hardening Windows servers and workstations Solve Vulnerabilities in web servers Solve complex Linux problems Deploy of Red Hat Satellite

SOLUTION

How did you select this vendor and what were the deciding factors?

We select the vendor because we had good references from othee collegues. The deciding factor was the technical expertise of the team.

Describe the project in detail and walk through the stages of the project.

They analized the current situation of our company, and made a detailed plan to correct the gaps detected.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with a team of 4 resources and a team Leader. We usually talked to the company owners, who were supervising the whole project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We improved the hardening status of the workstations, acording to the corporate guides, from 70% of compliance, to 97% of compliance.

How effective was the workflow between your team and theirs?

We communicate by mail, phone and made frequent meetings. The communication was very clear and positive.

What did you find most impressive or unique about this company?

They are providers, but they have the same compromise of full time employee. They are technically brillant.

Are there any areas for improvement or something they could have done differently?

No

BACKGROUND

Please describe your company and your position there.

I am the CIO of the most important engineering and construction company in Uruguay

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Nexa?

Our salary and personnel administration system is stored in a postgresql database, the same as other smaller systems. The company requires that these systems are always operational and the data must have high levels of security.

SOLUTION

How did you select this vendor and what were the deciding factors?

Nexa was highly recommended by our business partners.

Describe the project in detail and walk through their service package.

Nexa provides proffesional consulting services and management of our databases. Its services include scripting for different tasks, health monitoring, replication and backup configuration, creation of new environments, and migration processes. Their strengths are their proactive attitude and ability to recommend improvements to the process.

How many resources from the vendor's team worked with you, and what were their positions?

We have a stable team of professionals assigned to assist us, but on specific occasions and for certain tasks the team is reinforced with other specialists.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Thanks to the assistance of Nexa we were able to obtain high availability of our databases. In addition, they generated scripts that improved query times.

How effective was the workflow between your team and theirs?

They use an efficient ticket system, which results in short response times for our requirements

What did you find most impressive or unique about this company?

They are meticulous and responsible. They properly plan tasks and carry them out methodically.

Are there any areas for improvement or something they could have done differently?

We didn't find any

BACKGROUND

Please describe your company and your position there.

Company: Electronic invoicing software solution company My position: Information Security Manager

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Nexa?

Vulnerability Assessment & Ethical Hacking

SOLUTION

How did you select this vendor and what were the deciding factors?

We selected Nexa for its trajectory in the field of cybersecurity, for its experience in the industry and the technical capabilities of the work team.

Describe the project in detail and walk through the stages of the project.

Vulnerability assessment and ethical hacking for a new software developed by the company. We began with a kick-off meeting, then we agreed the scope of the assessments and Nexa began with the tasks. At the end of the assessments, Nexa sent us a report with findings and recommendations and we held a final meeting to discuss the report.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with the CTO, the Customer Success Manager, and 2 members of Nexa´s ethical hacking team.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Confidential.

How effective was the workflow between your team and theirs?

Very effective workflow. It was very easy to work with Nexa´s team. Answered all of our questions and easy to get in touch with.

What did you find most impressive or unique about this company?

We like the work methodology they use, not only automated scans but a lot of manual testing, very personalized. The report was very clear to understand, and the findings were very well presented.

Are there any areas for improvement or something they could have done differently?

Not identified.

BACKGROUND

Please describe your company and your position there.

CTO and Co-Founder of Custom Software Development company

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Nexa?

We were looking for an external cybersecurity company to perform a web application pentest on a new web platform.

SOLUTION

How did you select this vendor and what were the deciding factors?

We have worked with them on a past project for a common client.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of the website , identifying potential risks in the infrastructure. They carried out penetration testing and ran a complete scan for vulnerabilities. After they finished, they delivered a report on all of our risks and provided a list of security recommendation

How many resources from the vendor's team worked with you, and what were their positions?

• Practice lead
• Technical lead
• Ethical hacker

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify many risks. Not only were they thorough, but they also took the time to teach us additional cybersecurity best practices.

How effective was the workflow between your team and theirs?

They kept us updated as they went through each round of testing, and their reports were easy to understand.

What did you find most impressive or unique about this company?

They where effective and delivered on time.

Are there any areas for improvement or something they could have done differently?

They did some testing that was out of the scope