# Nexa Nexa Reviews (36), Pricing, Services & Verified Ratings - Premier Verified - 4.8 out of 5 average review rating - 2 connections joined Nexa's Network [Visit Website](https://www.wearenexa.com/) [Get a Custom Proposal](https://clutch.co/profile/nexa-0-0) **Cybersecurity** Everything is a system, every system can be hacked, and humans are natural hackers. Our offensive cybersecurity offerings put you one step ahead of cybercrime. We offer customized and advanced offensive cybersecurity professional services. We are committed to understanding how cybersecurity vulnerabilities affect your business goals. And we foster long-term partnerships with our clients facing world-class technical challenges. ## Company Information - Minimum project size: $10,000+ - Hourly rate: $100 - $149 - Number of employees: 10 - 49 - 3 Locations: - Montevideo, Uruguay (Headquarters) - Buenos Aires, Argentina - La Reina, Chile - Founded in 2015 - 3 languages: English, Spanish, Portuguese - 1 timezones: Argentina Standard Time (AGT) ## Services, Focus Areas, Industries, and Clients ### Service Lines - 60% Cybersecurity - 30% Cloud Consulting & SI - 10% IT Managed Services ### Focus Areas - Cloud Computing Focus: - 70% AWS Cloud Consulting & Implementation - 20% Azure Cloud Consulting & Implementation - 10% Google Cloud - Cybersecurity Technologies: - 40% Auth0 - 40% Okta - 20% SecureAuth - Cybersecurity focus: - 40% Threat/Attack Simulations - 30% Cloud Security - 10% Breach Detection & Incident Response - 10% Cybersecurity Consulting - 10% Digital Forensics & Auditing - Azure Consulting Services: - 30% Azure DevOps - 30% Azure Migrations - 30% Azure Security - 10% Azure Management & Governance - IT Managed Services Focus: - 30% Managed Software Application & Solutions - 25% Security - 20% Disaster Recovery - 10% Governance & Compliance Assessments - 5% IT Budgeting - 5% Network - 5% Other IT managed services - AWS Consulting Services: - 25% AWS DevOps - 25% AWS Managed Cloud - 25% AWS Security - 15% AWS Migrations - 10% AWS Applications ### Industries - 15% Medical - 20% Information technology - 10% Retail - 10% Telecommunications - 25% Financial services - 20% Government ### Clients - 50% Small Business (<$10M) - 30% Midmarket ($10M - $1B) - 20% Enterprise (>$1B) ## Pricing Snapshot Average rating for cost based on this provider's reviews: 4.7 out of 5 **What Clients Have Said** *(This summary is based on verified Clutch reviews.)*: Nexa offers competitive pricing for cybersecurity services, with project costs ranging from $5,000 to over $500,000, depending on the client's size and project scope. Clients appreciate the value for cost, citing timely delivery and thorough communication, indicating strong project management. **Most Common Project Size**: Less than $10,000 based on 26 reviews *(Pricing information for this provider is based on reviews where the project size was available.)* ### Pricing by Service - Cybersecurity: Less than $10,000 based on 20 reviews - IT Managed Services: $50,000 to $199,999 based on 10 reviews - Other IT Consulting and SI: Less than $10,000 based on 3 reviews - Application Testing: $10,000 to $49,000 based on 2 reviews - Custom Software Development: $10,000 to $49,000 based on 1 review - Cloud Consulting & SI: Less than $10,000 based on 1 review - Application Management & Support: $50,000 to $199,999 based on 1 review - IT Strategy Consulting: $50,000 to $199,999 based on 1 review - Business Consulting: $200,000 to $999,999 based on 1 review ### Packages Offered - Cybersecurity Packages — starting at $11,500/total ## Reviews Clutch investigates each reviewer's identity and work history. Every review goes through a rigorous, human-led verification process to confirm the reviewer's identity, and reviews that we verify are visibly marked as 'Verified' so you can trust that they come from a real client. [Learn More](https://help.clutch.co/en/knowledge/how-clutch-verifies-reviews) ### Nexa Review Insights Overall Review Rating: 4.8 - Quality: 4.9 - Schedule: 4.7 - Cost: 4.7 - Willing to Refer: 4.9 ### Top Mentions - Timely (13 mentions) - Professional (10 mentions) - Knowledgeable (9 mentions) - Communicative (8 mentions) - Great project management (5 mentions) - Experienced (3 mentions) - Flexible (3 mentions) - Great team (3 mentions) - High-quality work (3 mentions) - Proactive (3 mentions) - Exceeds expectations (2 mentions) - Exceptional performance (2 mentions) - Trustworthy (2 mentions) - Unique expertise (2 mentions) - Innovative (1 mentions) - Meets deadlines (1 mentions) - Team players (1 mentions) - Translate ideas into products (1 mentions) - Transparent (1 mentions) - Well-organized projects (1 mentions) ### Review Highlights **Impressive Technical Expertise** Clients highlight the technical excellence of Nexa's team across various projects. Their ability to handle complex IT and cybersecurity challenges is frequently noted, with clients valuing their knowledge and problem-solving skills. **Strong Project Management Skills** Nexa is recognized for their robust project management capabilities, maintaining timelines, and clear communication. Clients appreciate their frequent updates and adherence to schedules, contributing to a seamless workflow and successful project execution. **Emphasis on Continuous Improvement** Nexa is noted for their commitment to continuous improvement, often seeking client feedback to enhance their services. This dedication to growth and adaptation is well-received by clients. **Proficient in Cybersecurity Services** Reviews consistently praise Nexa's cybersecurity services, including penetration testing, vulnerability assessments, and ethical hacking. Clients from various industries, such as finance, healthcare, and technology, commend their thoroughness in identifying vulnerabilities and providing actionable recommendations. **Effective Communication and Responsiveness** Nexa is commended for their effective communication, using multiple channels such as email, virtual meetings, and messaging apps. Clients appreciate their responsiveness and willingness to discuss project scopes to ensure satisfaction. **High Client Satisfaction and Recommendations** Overall client feedback is overwhelmingly positive, with many clients expressing satisfaction with Nexa's services and willingness to recommend them to others. This highlights Nexa's strong reputation in the B2B sector. **Room for Improvement in Timeliness** While Nexa generally meets deadlines, some clients noted delays in project delivery. This suggests an area for potential improvement to enhance client satisfaction further. **Proactive and Strategic Partnership** Clients describe Nexa as a proactive partner, always willing to go the extra mile to ensure project success. Their strategic insights and ability to anticipate client needs are appreciated, contributing to long-term partnerships. **Tailored and Client-Centric Approach** Nexa's personalized approach to client projects is well-received. They are noted for understanding client needs, providing tailored solutions, and ensuring a good cultural fit, which enhances client satisfaction. ### Nexa Reviews #### Cybersecurity Services for Payment Company (Featured Review) **The Project** - Services: Cybersecurity, IT Managed Services - Project size: $50,000 to $199,999 - Project length: Mar. 2023 - Ongoing **Project Summary**: Nexa provides cybersecurity services for a payment company. The team has addressed an issue for the client and now acts as the client's cybersecurity team, fixing bugs and making system improvements. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** COO, GETNET - Industry: Financial services - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Jun 27, 2025 **Feedback Summary**: Thanks to Nexa 's work, the team has seen a marked improvement in their monthly reports, seeing no critical or high-importance issues and a reasonable number of minor problems. The team is budget-conscious and communicates daily. They are proactive and constantly stay one step ahead. ""They're very proactive and try to be a strategic partner to our company."" **BACKGROUND** Introduce your business and what you do there.I’m the COO of a payment company. My responsibilities include everything pertaining to security, including processing, projects, audits, and the operational side of fixing the tools we use.  **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We had a pending task for months. Additionally, I needed to have cybersecurity and controller teams within our company. **SOLUTION** What was the scope of their involvement?Nexa helped us fix a pending issue. Currently, they act as our internal cybersecurity team, handling cybersecurity bug resolution. Nexa also implements improvements into our systems. We have several certifications for the transactional world, and on the non-transactional side, we follow the rules and regulations of the larger corporation, which provides us with our cybersecurity standards. Since we belong to a larger group, live monitoring and other tools are handled by the larger corporation that manages us.What is the team composition?We work with two teammates from Nexa: Javier and Bruno. They both have senior status, though Bruno leads our project. How did you come to work with Nexa?We found them through a colleague who knew Nexa was a security specialist, specifically pertaining to servers. We explained our case to Nexa, and they told us they could move the project forward.How much have you invested with them?Since 2023, we've spent around $150,000.What is the status of this engagement?Our first communication with Nexa was in March 2023, our current project started in June 2024, and the engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?The issue we had pending for two months, Nexa solved in a week. We're part of a larger company and are in the operational cybersecurity committee of the region. We provide reports every month about our internal and external scanning and scanning of our equipment. That's the reference we have regarding metrics of Nexa's work. Since these committees started last year, we've seen a marked improvement. We've reduced critical cybersecurity incidents, where before we had several. We haven't had critical or high-importance issues, and the issues we do have are within a reasonable number. How did Nexa perform from a project management standpoint?Nexa is very responsible with the budget. Every two months, they provide us with reports of the hours worked. We have a monthly hour limit, and, based on the number of tasks they have, Nexa manages their hours accordingly. We always use our monthly hours, sometimes a bit less, and sometimes a bit more. Overall, their resource and time management is noteworthy in that they understand the hour package. We communicate with them daily via phone calls, emails, and WhatsApp. Every week, we talk to them for 1–2 hours. Since our working dynamic is settled, Nexa knows what they have to do and only contacts us for certain tasks. They act as part of our internal team.As for project management tools, we determine what we use with Nexa on our side. We use Azure DevOps to follow up on tasks. I know Nexa uses tools to log their work hours, but we don't see them on our end.What did you find most impressive about them?They're very proactive and try to be a strategic partner to our company. Nexa is always willing to handle any cybersecurity issues and is always one step ahead. They've never charged us extra; they understand our business and needs. Are there any areas they could improve?There's nothing they need to improve. We should probably hire them for more hours. I would be more comfortable with that, because we have lots of tasks, and Nexa is always handling high-priority issues. Our budget limits that, though, and we're happy with the work Nexa does with the hours we pay them.Do you have any advice for potential customers?I recommend having Nexa conduct a complete analysis of your cybersecurity situation and status. This is key to determining a starting point and having a conversation with the team, and understanding what they can do for you. Additionally, consider what role Nexa will have in your project, especially if your company is small. --- #### IT Consulting & Cybersecurity Services for BPO Company **The Project** - Services: Cloud Consulting & SI, Cybersecurity, IT Managed Services - Project size: Confidential - Project length: June - July 2025 **Project Summary**: Nexa provided IT consulting and cybersecurity for a contact center and BPO company. The team assessed the client's IT infrastructure and cybersecurity posture and created an action plan for improvement. **Review Rating**: 4.0 - Quality: 4.0 - Schedule: 4.5 - Cost: 4.0 - Willing to Refer: 4.0 **The Reviewer** Technology Partnerships & Solutions Lead, IT Company - Industry: Information technology - Client size: 1,001-5,000 Employees - Review Type: Online Review - Verified **The Review** — Jan 8, 2026 **Feedback Summary**: The engagement was successful. Nexa delivered the project on time and in accordance with the client's needs. The team impressed the client with their detailed work and follow-up on the proposed actions. Nexa also communicated well through email and virtual meetings. ""Their attention to detail and follow-up of the proposed actions were impressive."" **BACKGROUND** Please describe your company and position. I am the Technology Partnerships & Solutions Lead of an information technology company Describe what your company does in a single sentence.At our company, we collaborate to improve every interaction with your customers, driving innovation through our Contact Center & BPO services and Technological Developments to achieve a unique experience.Our value proposition is based on a synergistic, innovative, and complementary model. We empower digital transformation and promote the omnichannel experience for businesses.For over 25 years, our employees and our customers have been at the heart of our work, ensuring that working together is a positive and memorable adventure. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?The objective of this project is to understand the current state of the Technological Platform and the Cybersecurity posture of the infrastructure **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?Referred to meDescribe the scope of work in detail. Please include a summary of key deliverables.Based on the consulting work carried out, the following conclusion was reached:The following consolidated action plan was determinedto address the improvement opportunities and recommendations in a structured manner. The plan is divided into execution phases, from the most urgent and critical actions to medium-term strategic improvements.Phase 1: Critical Risk Mitigation ActionsThis group contains the findings with the highest risk to security and business continuity. They must be addressed with the highest priority.● Critical Access Security○ Implement MFA on VPN access: deploy a multi-factor authentication solution for all remote access to the corporate network.○ Secure AWS root accounts: activate MFA and remove any existing access keys in the root account of all AWS accounts. ● Public Exposure Remediation○ Audit and remediate security groups in AWS: conduct a thorough review to restrict unrestricted access (0.0.0.0/0) to management ports (SSH, RDP) and databases in all security groups.○ Block public access to S3: audit all S3 buckets, remediate unintentional public access, and enable "S3 Public Access Blocking" at the account level as a preventative measure (in case there are no public buckets).● Sensitive Data Protection○ Encrypt data at rest in backups: implement encryption for all backup data from on-premises solutions (IDPA and Acronis). ● Basic Visibility and Auditing:○ Enable AWS CloudTrail at the organization level: Activate CloudTrail in all regions and for all accounts, ensuring that logs are securely stored. This is a non-negotiable step for cloud security.Phase 2: Fundamental Governance and Security EnhancementsOnce immediate risks are mitigated, this phase focuses on establishing the foundation for secure and efficient long-term management.● Cloud Governance:○ Establish a Cloud Governance Committee: Formalize a cross-functional team to define and enforce cloud usage, security, and cost policies.wearenexa.com4Infrastructure Assessment○ Implement a landing zone: Use AWS Control Tower to standardize the deployment of new accounts with security and governance baselines. ○ Implement a security governance account and activate native AWS security tools:■ AWS Cloudtrail, to obtain AWS usage audit logs.■ AWS GuardDuty, for threat detection.■ AWS Security Hub, to obtain a centralized view of the security posture.● Identity and log management:○ Federate identity management in the cloud: plan and initiate the project to integrate AWS authentication with Azure AD.○ Expand log ingestion in the SIEM: integrate logs from critical assets (firewalls, switches) and cloud environments with the SOC's QRadar solution.○ Centralize operational logs: begin evaluating and implementing a centralized platform (e.g., ELK Stack) for collecting troubleshooting logs from the entire hybrid environment. ● Technical Debt Remediation:○ Plan the migration of obsolete systems: create a roadmapto decommission or migrate servers running Windows Server 2003.Phase 3: Optimization and Operational MaturityThis phase focuses on improving the efficiency, resilience, and standardization of IT operations.● Automation and Processes:○ Adopt Infrastructure as Code (IaC): initiate a pilot projectto manage a service on AWS using Terraform orstandardizing the use of CloudFormation, with versioned code ina repository.○ Formalize hardening policies: document and apply secure configuration baselinesfor all new operating systems andapplications.○ Establish a formal on-call process: define and communicate an on-call schedule for after-hours incident response. ● Resilience and Monitoring:○ Implement On-Premise Storage Replication: Evaluate and implement a solution for replicating storage data between the two data centers.○ Unify and Improve Monitoring: Evolve towards a unified monitoring tool for the hybrid environment that includes observability and APM capabilities.● Continuous Security Management:○ Ensure Password Manager Adoption: Drive full adoption of Bitwarden across all technical teams.wearenexa.com5Infrastructure Assessment○ Expand Pentest Coverage: Ensure that future penetration tests comprehensively cover the services and applications deployed in the cloud. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?The deadlines for deliverables were always respected, responding to the needs and the established plan, and explaining the points worked on through a meeting.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?Their attention to detail and follow-up of the proposed actions were impressive.Are there any areas for improvement or something Nexa could have done differently?N/A --- #### Cybersecurity & Testing Services for Financial Services Co **The Project** - Services: Application Testing, Cybersecurity, Other IT Consulting and SI - Project size: $10,000 to $49,999 - Project length: July 2024 - Ongoing **Project Summary**: Nexa provides comprehensive cybersecurity services for a financial services company. The team works on penetration testing, ethical hacking, brand protection, and incident response. They also deliver reports. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** CISO, Redpagos & Midinero - Industry: Financial services - Client size: 201-500 Employees - Review Type: Phone Interview - Verified **The Review** — Jul 29, 2025 **Feedback Summary**: Nexa has discovered valuable vulnerabilities in the clients' systems during penetration testing. The team shows an ingenious and assertive thinking process, manages the project well, has an agile response time, and communicates excellently. Overall, their work quality has satisfied the client. ""We’re very satisfied with their services."" **BACKGROUND** Introduce your business and what you do there.I’m the CISO for Red Pagos & Midinero, two companies in Uruguay. We're in the financial industry. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We needed cybersecurity services. **SOLUTION** What was the scope of their involvement?Nexa provides us with various cybersecurity services, including red team services, penetration testing, and ethical hacking exercises. The team also works on brand protection for both our companies and serves as first responders in case of cybersecurity incidents. In fact, Nexa provides services 100% remotely.Initially, we contracted their services for penetration testing and ethical hacking. We had to review some critical applications to detect vulnerabilities. We had an exercise between three providers and chose Nexa. During the exercise, Nexa detected some interesting vulnerabilities in our system, which we had to correct as soon as possible.So now, if we have a cybersecurity incident, we can call them for assistance. Currently, we also have brand protection and incident response services. We have a certain number of hours dedicated to penetration testing and ethical hacking exercises. It also depends on if we have a specific project to deliver to production.What is the team composition?It depends on the project. Nexa assigns the best resources to different projects.For example, if we have a project related to AWS, they assign internal resources that are more specialized in those systems. We’ve had contact with five different people from the company. It depends on the service, but there is generally a team of 4–5 people assigned to penetration testing and ethical hacking projects.How did you come to work with Nexa?Nexa is a well-known company in Uruguay for many cybersecurity services. My first approach was through a referral, but I’ve known them for five years. Their experience convinced us to engage them.How much have you invested with them?We pay a monthly fee for brand protection. The total investment range is between $10,000–$49,000.What is the status of this engagement?We've been working with Nexa since July 2024, and the engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?In general, during all the penetration testing exercises, Nexa has discovered interesting vulnerabilities in our system. They never fail to find vulnerabilities, which is valuable for us. They also provide us with a very agile response time if we need them to assist us with a cybersecurity incident.What I like the most about Nexa is that they don’t only scan applications. They think like hackers and have the mindset of what fraudsters can exploit from vulnerabilities. The reports from their ethical hacking and pen testing exercises are very well explained. There is a lot of technical vocabulary, but they have a great ability to translate those technical vulnerabilities into risks. Overall, their work quality has exceeded our expectations.How did Nexa perform from a project management standpoint?Nexa’s project management is very good. We have an assigned figure, and their responsibility is to follow up on the different kinds of services they give us. They are very aware and careful about the quality of the service they give us. We have very good communication with the company. Generally, we use Google Meet, emails, and phone calls.What did you find most impressive about them?Nexa does a great job in penetration testing and brand protection. They translate technical vulnerabilities into risks that our company's C-suite can understand, which is valuable to us. We are very satisfied with their work.Are there any areas they could improve?No, there aren’t any. They’re giving us very good service. I don’t have any pain points or recommendations. We’re very satisfied with their services.Do you have any advice for potential customers?It’s essential to compare Nexa's services with other solutions. Compared to the Uruguayan market, they’re the best in class, so I totally recommend them. --- #### Cybersecurity Services for Payment Company **The Project** - Services: Cybersecurity, IT Managed Services - Project size: $50,000 to $199,999 - Project length: Mar. 2023 - Ongoing **Project Summary**: Nexa provides cybersecurity services for a payment company. The team has addressed an issue for the client and now acts as the client's cybersecurity team, fixing bugs and making system improvements. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** COO, GETNET - Industry: Financial services - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Jun 27, 2025 **Feedback Summary**: Thanks to Nexa 's work, the team has seen a marked improvement in their monthly reports, seeing no critical or high-importance issues and a reasonable number of minor problems. The team is budget-conscious and communicates daily. They are proactive and constantly stay one step ahead. ""They're very proactive and try to be a strategic partner to our company."" **BACKGROUND** Introduce your business and what you do there.I’m the COO of a payment company. My responsibilities include everything pertaining to security, including processing, projects, audits, and the operational side of fixing the tools we use.  **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We had a pending task for months. Additionally, I needed to have cybersecurity and controller teams within our company. **SOLUTION** What was the scope of their involvement?Nexa helped us fix a pending issue. Currently, they act as our internal cybersecurity team, handling cybersecurity bug resolution. Nexa also implements improvements into our systems. We have several certifications for the transactional world, and on the non-transactional side, we follow the rules and regulations of the larger corporation, which provides us with our cybersecurity standards. Since we belong to a larger group, live monitoring and other tools are handled by the larger corporation that manages us.What is the team composition?We work with two teammates from Nexa: Javier and Bruno. They both have senior status, though Bruno leads our project. How did you come to work with Nexa?We found them through a colleague who knew Nexa was a security specialist, specifically pertaining to servers. We explained our case to Nexa, and they told us they could move the project forward.How much have you invested with them?Since 2023, we've spent around $150,000.What is the status of this engagement?Our first communication with Nexa was in March 2023, our current project started in June 2024, and the engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?The issue we had pending for two months, Nexa solved in a week. We're part of a larger company and are in the operational cybersecurity committee of the region. We provide reports every month about our internal and external scanning and scanning of our equipment. That's the reference we have regarding metrics of Nexa's work. Since these committees started last year, we've seen a marked improvement. We've reduced critical cybersecurity incidents, where before we had several. We haven't had critical or high-importance issues, and the issues we do have are within a reasonable number. How did Nexa perform from a project management standpoint?Nexa is very responsible with the budget. Every two months, they provide us with reports of the hours worked. We have a monthly hour limit, and, based on the number of tasks they have, Nexa manages their hours accordingly. We always use our monthly hours, sometimes a bit less, and sometimes a bit more. Overall, their resource and time management is noteworthy in that they understand the hour package. We communicate with them daily via phone calls, emails, and WhatsApp. Every week, we talk to them for 1–2 hours. Since our working dynamic is settled, Nexa knows what they have to do and only contacts us for certain tasks. They act as part of our internal team.As for project management tools, we determine what we use with Nexa on our side. We use Azure DevOps to follow up on tasks. I know Nexa uses tools to log their work hours, but we don't see them on our end.What did you find most impressive about them?They're very proactive and try to be a strategic partner to our company. Nexa is always willing to handle any cybersecurity issues and is always one step ahead. They've never charged us extra; they understand our business and needs. Are there any areas they could improve?There's nothing they need to improve. We should probably hire them for more hours. I would be more comfortable with that, because we have lots of tasks, and Nexa is always handling high-priority issues. Our budget limits that, though, and we're happy with the work Nexa does with the hours we pay them.Do you have any advice for potential customers?I recommend having Nexa conduct a complete analysis of your cybersecurity situation and status. This is key to determining a starting point and having a conversation with the team, and understanding what they can do for you. Additionally, consider what role Nexa will have in your project, especially if your company is small. --- #### Managed IT Services & Cybersecurity for SaaS Products Co **The Project** - Services: Cybersecurity, IT Managed Services - Project size: $50,000 to $199,999 - Project length: Jan. 2017 - Ongoing **Project Summary**: Nexa provides managed IT and cybersecurity services for a SaaS products company. The team has helped the client solve IT infrastructure issues and implement new configurations to ensure system performance. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 4.0 - Cost: 3.5 - Willing to Refer: 5.0 **The Reviewer** CEO, GNS Software - Industry: Information technology - Client size: 11-50 Employees - Review Type: Phone Interview - Verified **The Review** — May 16, 2024 **Feedback Summary**: Thanks to Nexa, the client has achieved excellent system performance. The team is very reliable and supportive, providing invaluable peace of mind to the client, as they're always there to solve issues and keep everything up and running. Moreover, their problem-solving responsiveness is impressive. ""The continuity of my business is in Nexa's hands, which speaks volumes about the confidence we have in them."" **BACKGROUND** Introduce your business and what you do there.I'm the CEO of GNS Software. We're based in Uruguay and provide cloud-based SaaS products to about 3,000 clients. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?I brought Nexa to help me get things in order because, when I met them, I was having issues with one of my products' performance. Although we had coding skills, we lacked software infrastructure knowledge. Therefore, when my company started growing, we had to provide professional maintenance to our products in ways we didn't know.One of these issues was that we were working with a local physical server provider, and that server went offline every now and then. Whenever that happened, the service provided rebooted the physical server so it would work again. Still, this was a big issue. At one point, we ran one of our products through an ethical hacking process and found a lot of vulnerabilities.Once we discovered that we had cybersecurity issues, we decided to implement a web app firewall. However, our system started to get chaotic and have strange behavior. Therefore, I decided to hire Nexa to help us out. **SOLUTION** What was the scope of their involvement?Nexa provides us with managed IT and cybersecurity services. Initially, I hired them to help us fix our product's vulnerabilities, going from the most critical to the least. Their team first delivered a proposal for a project to implement multiple high-availability servers to better support our product.From there, we worked with Nexa to create a solution implementation schedule for the issues that we needed to solve, going from urgent matters to mid-term and long-term solutions. The team started making adjustments to our servers' infrastructure, including revamping MySQL's servers and reconfiguring Apache. They implemented a lot of configuration changes.Once Nexa solved the urgent performance issues, we started diving into an analysis process. They worked with us to understand what we did and started getting familiarized with our company and products so that they could provide advice and guidance through a secure roadmap.Since then, Nexa has created a cybersecurity roadmap for us, which we update every two years. Thankfully, our company has kept growing, so we constantly have IT infrastructure and cybersecurity needs, which they've continued to address.What is the team composition?Initially, we worked with Juan (COO), Mauricio (Database Administrator), and another teammate with expertise in IT infrastructure. Juan was in charge of overseeing the initial project, and the other two teammates worked on it, each focusing on their expertise.After the initial project, there was a team turnover. Juan keeps working with us, but we now also work with Claudio (Technical Account Manager), who is in charge of our roadmap strategy and planning. He's currently our main point of contact from Nexa. We tell Claudio about everything we require, and he's in charge of passing the information down to his team.We also work directly with technicians and engineers from Nexa, who enter the project depending on the urgency of the task they need to handle. For example, if our server fails on a Sunday, even Juan helps us directly. If an issue occurs within the week, he delegates the task to one of these technicians.How did you come to work with Nexa?We found them through a referral. One of our clients is a financial services company. An IT and cybersecurity consulting company worked with our client on a cybersecurity development project. During this project, the IT company found vulnerabilities within our system, so this company recommended Nexa.How much have you invested with them?We've spent around $25,000 per year. Still, this year the fee almost doubled, so we're now spending around $40,000–$50,000 per year.What is the status of this engagement?We've been working together since 2017. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?Immediately after Nexa started making changes to our server's configuration, we noticed an improvement in our system's performance. Since that moment forward, we've basically delegated our peace of mind to Nexa. We can go to sleep with the confidence that, if something happens, they'll be there to help us out.Overall, we're very happy with Nexa's work. Now, the continuity of my business is in Nexa's hands, which speaks volumes about the confidence we have in them and the quality of their work. If I weren't happy with their work, I would be already bee looking for a different service provider.How did the company perform from a project management standpoint?One of the greatest things we've done with Nexa is that we've established a WhatsApp group chat on which engineers from both companies are. Thanks to this group chat, whenever we have a request, their response is almost immediate. Therefore, we trust that they always take care of us. In addition to WhatsApp, we also use email, Google Meet, and Zoom to communicate.Urgent matters are discussed via WhatsApp. Non-urgent matters and requests are communicated via email. Additionally, we have video calls to analyze more in-depth issues.Around 99% of our collaboration has been online. Nexa's entire work is done remotely. Still, whenever we need to discuss mid-term strategies or business needs, we meet in person. We've decided to meet in person for these discussions in order to establish a trusting relationship, given that we've given them access to our servers and credentials.Every month, Nexa provides us with a performance report detailing different statistics, such as how long our server was online that month. Thus far, everything has been aligned. Sometimes, our projects take longer than expected, but most times, delays aren't Nexa's fault. Most delays are our fault because we don't spend as much time on these projects as we should.Still, it's important to recognize that there's always room for improvement for us — it's an endless path. We always have new things to look at, update, or improve.As for the budgeting, the cost fairness depends on how the client sees it. Back when we had the most issues to be fixed, Nexa's fees were cheaper. Now that we've fixed a lot of issues, their fee is higher. To me, their cost is a bit expensive. However, this is their business, and things have changed since we first engaged.Today, we don't pay them for what they do; we pay them for the compromise and confidence that they're there for us to solve any issue. I'm paying to have cybersecurity and tranquility for my business.Are there any employees from the service provider's team that you would like to give a shout-out to in this review?Although the whole Nexa team has been very good, I would like to congratulate Juan. He has been with us through our most difficult times. For example, we had an issue early in January. I don't remember if it was January 1st, but I do remember that they were on vacation. However, something important happened with the development of a solution, and Juan showed up to help us. Whenever his teammates can't find a solution, we go back to Juan, and he always finds the solution. He's like God to us.What did you find most impressive about them?Nexa solves problems and then negotiates. Their team first focuses on putting fires down. Then, they work with us to reach a payment arrangement. This approach is very valuable because they share our company values. We also first help our customers, and we then reach an agreement with them. With this approach, they don't hold the client hostage to get paid.Are there any areas they could improve?I don't have any suggestions for improvement for Nexa; I'm very happy with them. Sometimes, our roadmap timeline extends because other things arise. As a company CEO, I would like to have everything solved at once, which isn't possible. In reality, Nexa is very responsive and energetic. They're always following up on us, which allows us to keep the project moving. They always push to make things happen.Do you have any advice for future clients of theirs?I have no particular advice. --- #### Penetration Testing Services for Public Bank **The Project** - Services: Cybersecurity, Other IT Consulting and SI - Project size: Confidential - Project length: May 2023 - Apr. 2024 **Project Summary**: Nexa provided penetration testing services for a public bank. Nexa conducted tests on the environment selected by the client and delivered reports with proposed solutions accompanied by explanatory talks. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Head of the Non-Financial Risk Department, BHU - Industry: Financial services - Client size: 201-500 Employees - Review Type: Phone Interview - Verified **The Review** — Apr 15, 2024 **Feedback Summary**: Nexa detected 11 vulnerabilities in the client's systems and implemented effective solutions. The team showcased an impressive willingness to adapt to the client's project and proposed coherent solutions. Nexa delivered work on time and had good communication via email and Microsoft Teams. ""Nexa proposed coherent solutions based on their knowledge of our institution."" **BACKGROUND** Introduce your business and what you do there.I'm the head of the non-financial risk department at a public bank. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We required penetration testing (pentesting) and ethical hacking services. Our goal was to have continuous support and feedback; we didn't want to work with a service provider who only delivered reports.  **SOLUTION** What was the scope of their involvement?Initially, we had a meeting with Nexa's team about how the bank intended to develop the service we hired. Afterward, we had follow-up meetings with the team to present the team's results of the different project stages. We selected what Nexa would work on, and the team returned with a report of their findings and accompanied it with a meeting to help us understand those results. Nexa followed the same process at each project stage, which was carried out in an environment we previously selected. We gave Nex's team the necessary attributions so they could work on our systems. The team was given a deadline to run the necessary tests and then gave us the report with the explanatory talk to present the vulnerabilities found and proposed solutions. After implementing the solutions presented in their reports, Nexa carried out tests to see if they had solved the detected vulnerabilities. The project focused on finding vulnerabilities and improvements, and we made decisions based on those recommendations.What is the team composition?We worked with around 5–6 teammates from Nexa, although the team isn't always the same since each project stage required different specialists. My direct point of contact was Claudio (Technical Account Manager), who managed the relationship between Nexa and us as a client.How did you come to work with Nexa?We're a public organization and must make an open call to hire service providers. Nexa made an offer based on the conditions and demands we requested. We selected Nexa because of their offered quality and price relation over the other bidders. Additionally, we had previously worked with Nexa, and that was a plus because they already knew our company.What is the status of this engagement?We started working with Nexa in May 2023, and we're currently closing the project. We're also engaged with Nexa on a different cybersecurity project that is still ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?Nexa detected 11 vulnerabilities in the environment we selected, providing strategies and recommendations to solve the detected vulnerabilities effectively.How did Nexa perform from a project management standpoint?Nexa delivered work on time and communicated well with us. We communicated via email and virtual meetings on Microsoft Teams.What did you find most impressive about them?Nexa's greatest strength was their permanent exchange with us and their willingness to work and adapt to our project. Nexa proposed coherent solutions based on their knowledge of our institution.Are there any areas they could improve?I can't think of anything for Nexa to improve. I don't have extra demands because they did a fantastic job.Do you have any advice for future clients of theirs?I suggest clients ensure they have the required availability to address Nexa's needs and recommendations. If working with Nexa creates more complexities in your work or the project is larger than you can handle, the project will most likely not be successful. What generates quality in Nexa's service is that they accompany their clients, but clients must also be available to receive their service and recommendations. I also recommend being open to the solutions proposed by Nexa and not taking them as criticism since the team's goal is to help their clients improve. --- #### Cybersecurity Services for Transportation Company **The Project** - Services: Cybersecurity - Project size: $10,000 to $49,999 - Project length: Oct. 2023 - Ongoing **Project Summary**: Nexa provides ongoing cybersecurity services for a transportation company. The team has established the cybersecurity framework and worked on risk management; they offered on- and off-site services. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** IT Expert, Transportation Company - Industry: Other industries - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Apr 3, 2024 **Feedback Summary**: Thanks to Nexa, users have improved their understanding of cybersecurity and made their passwords more complex and secure. The team is timely, flexible, and communicative through emails, Google Meet, and phone calls. Overall, they follow the client’s pace and stand out for their professionalism. "“What has impressed me the most is their ability to implement policies correctly.”" **BACKGROUND** Introduce your business and what you do there.I’m an IT expert for a transportation company. I’m in charge of the entire company's IT area. We have 75 people, and I handle everything at the IT and communications levels. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We needed a cybersecurity services provider. **SOLUTION** What was the scope of their involvement?We’ve involved Nexa in governance issues, such as establishing an entire cybersecurity framework. They’ve also helped us with the whole risk management part of writing policies and processes from the mother computer security policy toward the policies dependent on it that go down to the IT unit level, first through the organizational side and then to the units from the IT unit.Initially, Nexa delivered a work plan. After establishing the scope and seeing the company’s background, they offered an estimate of hours to execute and deliverables. They offer remote and in-person services. They’ve given an on-site awareness talk on cybersecurity issues for the entire company; they came in and gave the training. We also work remotely, connecting every week.What is the team composition?We had two teammates during the scope definition. On a daily basis, we have two other people. One is a teacher at the ORT Uruguay University in cybersecurity and ethical hacking who helps us prevent attacks because he knows how to attack. The other is focused on the defensive part of preventing cyber attacks, so they’re a good combination.How did you come to work with Nexa?Our purchasing process required us to choose three suppliers. In Uruguay, since everything is small, we often know the people who work at the companies. I knew someone who worked at Nexa in cybersecurity, so I included them in the selection process. I asked for the companies’ proposals, and they presented them. Management opened them and determined the selected company. After a comparative analysis of prices, deliverables, quality, and curriculum, the purchasing department stayed with Nexa. Their technical score and pricing favored them.How much have you invested with them?So far, we’ve spent less than $10,000. We plan to get to the top of the package, which is about $15,000.What is the status of this engagement?We began working with them in October 2023. Since we have an hourly package, we’ll continue working with them until we consume all the hours. We’ll probably do another ethical hacking and vulnerability testing project with them this year. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?It’s always difficult to measure these topics. In particular, we’ve seen the password complexity level increase, so we’ve successfully forced greater controls. Nexa has made users more attentive when they’re generating passwords, which was one of the weakest cybersecurity points we detected.Thanks to Nexa’s talk in our organization, users understood that they couldn’t set trivial passwords to access the system. We’ve also improved the company’s openness to cybersecurity, especially by making them more aware of threats and how attacks work.Other than that, we don’t have an exact IT metric. Regarding quality, Nexa follows our documentation standards using international frameworks, such as ISO 27001 and a cybersecurity framework in Uruguay based on NIST. Nexa works under these metrics, looking for the documentation, processes, and controls we need to be certified in the future.How did Nexa perform from a project management standpoint?Nexa meets the deliverables satisfactorily and fully complies with our time for the sessions. When we ask them to move them, they show flexibility. Moreover, the price is exactly what we’ve stipulated. I’ve asked them to give me details of how they spend the hours, which wasn’t included initially. They’ve already given me the breakdown of the first month.We hold meetings with them every week to coordinate the tasks between us and the deliverables for next week. We mainly communicate through emails, Google Meet, and phone calls if necessary. We’re not using a ticket management system.Are there any employees from the service provider's team that you would like to give a shout-out to in this review?Bruno (Technical Account Manager) has established all the processes and written the documentation. Javier (Ethical Hacker) gives us insights into the attack and cybersecurity threats; he explains how an attack is perpetrated so we can understand how to defend ourselves. They’re both really valuable and have helped us in everything. Overall, they provide knowledge in both aspects, which serves us for what we want to achieve for our company.What did you find most impressive about them?What has impressed me the most is their ability to implement policies correctly. Security policies are always at an organizational level, but the rest of the policies and processes don’t have to be for the whole company. Nexa has suggested keeping them in the orbit of the IT department so they’re controlled by the area. In summary, Nexa focused on dividing what had to be approved and implemented company-wide and what parts were the responsibility of the IT department. At first, I thought everything was for everyone, but it wasn’t like that.Additionally, they brought a pre-made risk management plan. Without knowing our company, Nexa started with the common risks and proposed a template we still use daily to track how we advance controls together.Are there any areas they could improve?No, they’ve complied well with the pace we’ve asked them to work. When we ask them to be on top of the project to help us push it, they’re there for us. We don’t identify an improvement area from our perspective; Nexa has worked well with us.As a small company, it’s just me and one more colleague in the IT area, so sometimes it’s difficult to advance some points. However, Nexa understands that and fulfills what we need.Do you have any advice for potential customers?We get the most out of them by clarifying where we want to go.  When you clearly define the scope, it immediately gives them a framework of where to aim, and they take you through that.Therefore, I recommend putting together the existing documentation, establishing the governance, and having a quick conversation with them about the deliverables you expect. In our case, we searched for the needed deliverables, put them in an RFP, and put together the documentation to present it on day one. --- #### IT Consulting & Cybersecurity for Bank **The Project** - Services: Business Consulting, Cybersecurity, Other IT Consulting and SI - Project size: $200,000 to $999,999 - Project length: July 2016 - Ongoing **Project Summary**: Nexa provides IT consulting and cybersecurity for a bank. The team has worked with the client on multiple IT projects, including developing an IT automation program using Red Hat, Ansible, and Terraform. **Review Rating**: 4.5 - Quality: 5.0 - Schedule: 4.5 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** IT Manager, Banco de la República Oriental del Uruguay - Industry: Financial services - Client size: 1,001-5,000 Employees - Review Type: Phone Interview - Verified **The Review** — Apr 1, 2024 **Feedback Summary**: Thanks to Nexa's support, the client has successfully advanced in all their IT initiatives. The team has shown impressive technical knowledge and great performance, offering a proactive approach to seeking new opportunities. Moreover, they deliver on time and offer streamlined communication. ""They always have a proactive mentality, constantly seeking new things to do within our organization."" **BACKGROUND** Introduce your business and what you do there.I'm the IT manager at BROU (Banco de la República Oriental del Uruguay). **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We originally needed to enhance our technical capabilities to develop an IT automation program. **SOLUTION** What was the scope of their involvement?Nexa provides us with IT consulting and cybersecurity services. When we first hired them, we defined a project scope: develop an automation tool that allowed us to work with a code-based infrastructure. Nexa also defined the technology to use and created and implemented automation integrations. The technology stack included Red Hat, Ansible, and Terraform.Since then, Nexa has worked with us on different initiatives within our organization. We generally seek tech support from their team to carry these initiatives to completion.What is the team composition?We've worked with around eight teammates from Nexa, including a project manager, a tech specialist, and various other technicians specialized in the different products we use.How did you come to work with Nexa?We found them through a personal recommendation.How much have you invested with them?We've spent over $500,000.What is the status of this engagement?Our first project started around July 2016, and our engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?Thus far, Nexa has successfully helped us advance in all our initiatives. Their team has continuously demonstrated a lot of knowledge about the technologies for which we seek their help.How did Nexa perform from a project management standpoint?Nexa usually delivers on time, and our communication is very streamlined. We've established a monthly meeting cadence, and we follow up on all the points of our checklist during those meetings. Although we've had delays on some projects, that issue is common for these types of projects. We communicate via Google Meet and phone calls. Additionally, Nexa provides us with a monthly report detailing every task completed during the month and the status of pending tasks.What did you find most impressive about them?I would like to congratulate the whole Nexa team. They've had a great performance thus far, so we're still engaged and active. They always have a proactive mentality, constantly seeking new things to do within our organization. Overall, they're a very interesting service provider for us.Are there any areas they could improve?For certain development projects, Nexa has occasionally delivered after the deadlines, so they could improve in that regard.Do you have any advice for future clients of theirs?Establish frequent follow-ups with your service provider. --- #### Cybersecurity Audit for Financial Services Company **The Project** - Services: Cybersecurity - Project size: $10,000 to $49,999 - Project length: May 2023 **Project Summary**: Nexa conducted an audit of a financial services company's cybersecurity. Nexa delivered a diagnosis document of the client's cybersecurity vulnerabilities with strategies to resolve them. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** General Manager, Financial Services Company - Industry: Financial services - Client size: 11-50 Employees - Review Type: Phone Interview - Verified **The Review** — Mar 4, 2024 **Feedback Summary**: Nexa identified different-level vulnerabilities in the client's cybersecurity, and their work met expectations. The team demonstrated impressive technical knowledge and human touch. Nexa delivered work on time and on budget, having excellent communication with the client via virtual meetings. ""Nexa's biggest strengths are their human touch and communication."" **BACKGROUND** Introduce your business and what you do there.I'm the general manager of a financial services company. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We needed a diagnosis and audit of our company's cybersecurity.  **SOLUTION** What was the scope of their involvement?We had a couple of meetings with Nexa to discuss our company's needs. The team explained their way of working, and the audit was carried out over a period of 20 days. Nexa gave us a document with a diagnosis of the strengths and weaknesses of our cybersecurity, as well as a strategy to improve it. The solution to these vulnerabilities was in charge of a different service provider.What is the team composition?We worked with three teammates from Nexa.How did you come to work with Nexa?Our company has two sister companies in Uruguay, and one of them previously worked with Nexa and referred them to us.How much have you invested with them?We spent around $11,000 on this project.What is the status of this engagement?We worked with Nexa in May 2023. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?Nexa's work met our expectations, and the team identified vulnerabilities of different levels in our company's cybersecurity.How did Nexa perform from a project management standpoint?Nexa delivered work on time and stayed on budget. The team had excellent communication via virtual meetings.What did you find most impressive about them?Nexa's biggest strengths are their human touch and communication. I was also impressed by the team's technical expertise.Are there any areas they could improve?I can't think of anything for Nexa to improve.Do you have any advice for future clients of theirs?I recommend future customers have open communication and enough disposition to provide Nexa's team with the information they require. --- #### Cybersecurity & IT Support for Insurance Company **The Project** - Services: Cybersecurity, IT Managed Services - Project size: $10,000 to $49,999 - Project length: Nov. 2022 - Ongoing **Project Summary**: Nexa provides ongoing infrastructure and cybersecurity support for an insurance company. The team monitors infrastructures, installs tools to prevent issues, and solves issues when they happen. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 4.5 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** IT Manager, Insurance Company - Industry: Other industries - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Mar 1, 2024 **Feedback Summary**: Thanks to Nexa’s efforts, the client has improved their services. The team exceeds expectations, solves issues quickly, handles each project’s schedule, and keeps the client informed through Google Meet, ticketing systems, and work reports. Overall, they’re transparent and technically proficient. "“They’ve demonstrated that they have specialized knowledge in every area they’ve worked on.”" **BACKGROUND** Introduce your business and what you do there.I’m the IT manager of an insurance company in Uruguay. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We needed someone to help us assess our infrastructure. **SOLUTION** What was the scope of their involvement?Every time we have an infrastructure change, Nexa provides support. Initially, we had a meeting before they made a formal job offer. We reviewed our servers' infrastructure, equipment, and different software versions. Nexa explained their expertise areas and where they could be more effective.We have a monthly contract with Nexa. In the last year, we’ve been in contact more frequently. They monitor all the neighboring structures and install tools that alert us of possible network problems.Moreover, they solve problems when they happen. They’ve helped us carry out specific infrastructure, server migration, OS updates, and security installation projects. Our goal is to get second-level support when our internal team can’t solve a situation.What is the team composition?Juan (COO) is our project manager. We also have a commercial associate, a technical associate, and 3–4 technicians with knowledge in different areas.How did you come to work with Nexa?A colleague knew Nexa’s owner. He worked independently for IBM over 10 years ago and kept in touch with him.How much have you invested with them?Last year we spent $20,000. What is the status of this engagement?We began working with them in November 2022, and our relationship is ongoing. We plan on having more projects with them. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?We aim to have uninterrupted services. Nexa’s work has improved us, and when we have a fall, they solve it quickly. Overall, Nexa has exceeded expectations.How did Nexa perform from a project management standpoint?In each project, we first have a scope definition stage where Nexa proposes the number of hours to complete the work. They plan the schedule because server updates imply that our service is down, so it has to be after hours. During the execution phase, they keep us informed and give us access so we can control their working hours.We generally use Google Meet for planning meetings and a ticketing system for all reports and requirements. We can also communicate directly with the project manager, their boss, or the owner’s cellphone. Additionally, Nexa shares a report of the hours they’ve dedicated to each project.What did you find most impressive about them?Nexa is very transparent; we’ve built a trustworthy relationship. If they can’t do something, they say it right away and don’t try to sell us anything else. Moreover, their technical proficiency is great. They’ve demonstrated that they have specialized knowledge in every area they’ve worked on. This year, they helped us change a sever until 3:00 a.m. Although it wasn’t planned, they answered quickly and went a step further to keep our services working.Are there any areas they could improve?No, I can’t think of anything to improve.Do you have any advice for potential customers?Be clear about your objectives and why you’re hiring them. Also, have as much documentation as possible on the company’s infrastructure. --- #### Penetration Testing for Process Automation Tool Provider **The Project** - Services: Cybersecurity - Project size: Less than $10,000 - Project length: May - Dec. 2023 **Project Summary**: Nexa performed annual penetration testing on an automation tool provider's platform to define the impact of a security breach. Nexa delivered executive and technical reports with recommendations. **Review Rating**: 4.5 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** VP of Technology, Flokzu - Industry: Information technology - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Feb 14, 2024 **Feedback Summary**: Nexa found weaknesses in the client's platform that were of high value and that they couldn't find in the past. The team demonstrated impressive technical knowledge and delivered work according to expectations. Nexa responded on time to the client's inquiries via email. ""They responded in time whenever we needed them."" **BACKGROUND** Please describe your company and position.I am the VP of Technology of FlokzuDescribe what your company does in a single sentence.At Flokzu we build a process automation tool that streamlines and simplifies the work of thousands of companies, making them more efficient, and our users happier because they can use their time in tasks that matter. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Execute a penetration test on our platform and find weak pointsPut under stress the security on a specific system's integration we delivered recently **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?Referred to meWe previously worked in another company and I know their jobHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.The objective of the work was to perform the annual penetration test on our platform, seeking to define the impact of a security breach in the following aspects: confidentiality and integrity of data, availability of systems and internal infrastructure. In addition we launched an integration with legacy technology and it was vital to specifically analyze this integration from a security point of view. The key deliverables where: an executive summary report that can be shared with clients (which includes information about how the test was conducted, known standards and best practices applied, etc.) and a detailed technical report that also includes potential impact and recommendations. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?They found weaknesses that where of high value for us, and other couldn't find in the past.Describe their project management. Did they deliver items on time? How did they respond to your needs?Yes they responded in time whenever we needed them, and deliver what we expected in terms of the project.What was your primary form of communication with Nexa?Email or Messaging AppWhat did you find most impressive or unique about this company?What impresses me most every time I work with them is the technical aspect of the team, they know what they do.Are there any areas for improvement or something Nexa could have done differently?We had a small misunderstanding when starting the project, it was a communication problem. After solving that everything worked smoothly. --- #### Cybersecurity Services for Insurance Provider **The Project** - Services: Application Management & Support, Cybersecurity, IT Managed Services - Project size: $50,000 to $199,999 - Project length: Jan. 2018 - Ongoing **Project Summary**: An insurance provider has hired Nexa for cybersecurity services. The team conducts penetration testing and is responsible for providing comprehensive vulnerability reports and security recommendations.  **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 4.5 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Systems Manager, Banco de Seguros del Estado - Industry: Other industries - Client size: 1,001-5,000 Employees - Review Type: Online Review - Verified **The Review** — Jan 10, 2024 **Feedback Summary**: Nexa has successfully installed Red Hat Single Sign-On and has progressively been integrating applications. The team supplies strong project management and is responsive to the client's needs. The client has been impressed with Nexa's consistent quality of work and overall efficiency.  ""Nexa stands out as a provider with exceptional technical robustness."" **BACKGROUND** Please describe your company and position.I am the Systems Manager of Banco de Seguros del EstadoDescribe what your company does in a single sentence.Banco de Seguros del Estado in Uruguay, is a state-owned insurance provider offering a comprehensive range of insurance solutions. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Conduct comprehensive offensive security assessments, including penetration testing, to enhance our cybersecurity infrastructure and identify potential vulnerabilitiesImplement Nexamon: a robust performance monitoring system, ensuring optimal operational efficiency and proactive management of our IT resourcesInstallation and ongoing support of a RedHat Single Sign-On solution, aiming to streamline our authentication processes and bolster security across our network **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?High ratingsGreat culture fitReferred to meHow many teammates from Nexa were assigned to this project?6-10 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.For offensive security assessments and penetration testing: Nexa was engaged to conduct offensive security assessments, including penetration testing, aimed at identifying and mitigating vulnerabilities within our IT infrastructure. This process involved a series of simulated cyber-attacks to assess the resilience of our systems against external and internal threats. Key Deliverables: A comprehensive vulnerability report, security recommendations, and an action plan to strengthen security infrastructure. Additionally, review sessions were included to discuss findings and mitigation strategies. For the implementation of Nexamon: Nexa's task included implementing their performance monitoring solution to oversee and optimize the performance of our applications. This encompassed setting up monitoring tools, integrating them with our existing systems, and training staff for their operation. Key Deliverables: A fully operational performance monitoring systemtechnical documentationperformance reports. Training for the IT team on the effective use and maintenance of the system was also provided. For the installation and support for RedHat Single Sign-On: Nexa was responsible for the installation, configuration, and ongoing support of the RedHat Single Sign-On solution. This project involved integrating the solution with our existing applications and systems to enable secure and efficient access to multiple services with a single authentication. Key Deliverables: A fully functional Single Sign-On solution, integrated with our systems. Detailed system documentation, as well as technical support and training, were included to ensure effective use and maintenance. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?The measurable outcomes from our collaboration with Nexa can be categorized based on each project component: RedHat Single Sign-On: The initial milestone was the successful installation of the RedHat Single Sign-On system. With Nexa's on-demand support, we have been progressively integrating applications one by one. This phased approach allowed us to measure success through each application's successful integration, enhancing our overall security and user authentication process. Nexamon Performance Monitoring: Similar to the Single Sign-On project, the Nexamon installation began with an initial setup, followed by a gradual integration of applications. The success here is measured by the seamless addition of each application into the monitoring system, which has significantly improved our ability to monitor and optimize system performance in real-time. Penetration Testing: For penetration testing, we engage Nexa on a demand basis for each application. The measurable outcome in this area is twofold: firstly, the detailed vulnerability report provided after each test, and secondly, the follow-up actions taken to ensure the elimination or mitigation of identified vulnerabilities. This process not only measures the immediate security status of each application but also tracks our progress in strengthening our overall cybersecurity posture.Describe their project management. Did they deliver items on time? How did they respond to your needs?Nexa stands out as a provider with exceptional technical robustness. They are known for their swift work pace and their ability to respond effectively to all our needs and complexities as a client. The Nexa's PM consistently monitors the progress of projects to ensure they are advancing on schedule and in the correct manner.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?What stands out most prominently about Nexa is the technical solidity of their team.Are there any areas for improvement or something Nexa could have done differently?Given the quality and efficiency of their work, it's challenging to pinpoint areas for improvement --- #### IT Infrastructure Mgmt Services for Educational Agency **The Project** - Services: IT Managed Services - Project size: $200,000 to $999,999 - Project length: July 2023 - Ongoing **Project Summary**: Nexa provides IT infrastructure management services for an educational agency. Their work includes database management, cybersecurity, and ongoing support. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 4.0 - Willing to Refer: 5.0 **The Reviewer** Telecommunications Manager, Educational Agency - Industry: Education - Client size: 201-500 Employees - Review Type: Phone Interview - Verified **The Review** — Jan 5, 2024 **Feedback Summary**: Nexa has brought impressive technical proficiency, professionalism, productivity, and empathy to the table, becoming an excellent partner for the client. The team delivers items on time and is agile, engaging, and responsive to the client's needs. Overall, the client is happy with the engagement. ""We've worked with other service providers, and our standard benchmark is always Nexa."" **BACKGROUND** Introduce your business and what you do there.I'm the telecommunications manager for an educational agency for innovation, so I'm in charge of our IT infrastructure. My company is around 17 years old, and we work to bring technology to every student and teacher in Uruguay. We also have technology programs for teachers and have a big portfolio of things we deliver to our educational system.One of the most important parts of our services is the educational platforms we provide. Our platforms include a library, an LMS, an English learning platform, and a video-conferencing system. We also provide internet access to every school in Uruguay and have a one-laptop-per-child program. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?Our platforms require content to populate our educational programs, and these programs need a solid IT infrastructure. Although part of my team is in charge of this infrastructure, we needed an excellent partner to help us manage it.For this purpose, we required a great company like Nexa to be our partner and not just a service provider. Our goal was to create an excellent relationship with them. It was very important for us to find an organization that could understand our business and priorities and that could work with us every day. **SOLUTION** What was the scope of their involvement?Nexa provides us with IT infrastructure management services. I'm only in charge of the telecommunications area within my company. However, Nexa also provides other services regarding cybersecurity.What is the team composition?We currently work with a service manager, a technical leader, two database administrators, and three technicians. If needed, Nexa can bring other specialists to the project, so their team isn't always the same. I also work directly with Facundo (Founder & CEO) and Juan (COO).How did you come to work with Nxa?My company originally started working with Nexa in 2017, and I joined by the end of 2020, so I can't talk about how we found them. However, it's worth mentioning that we're a public company that receives governmental support, so our vetting processes are public. Moreover, I know that everyone who has worked with them in the past is very happy with their services, so we hired them again for a new contract.How much have you invested with them?We pay Nexa by the hour, so the project budget isn't set. Still, for this contract, we have a cap of $200,000 for the whole year.What is the status of this engagement?Our newest contract started in July 2023, and it is for one year. Still, before this contract, we had already worked with Nexa from 2017–2021. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?As mentioned previously, it was very important for us that Nexa understood our business. Therefore, their impact is not only about their technical capabilities and professionalism but also about their empathy and engagement with us. Nexa is a great team with excellent technical knowledge, especially regarding database administration.Overall, Nexa has always been a great provider and an excellent and very professional team. Although I don't work directly with them every day, I've received great feedback from my teammates — they're very happy with Nexa.Database administration was something we really needed in 2023, so we were very happy to have them with us last year, helping us with different issues. Besides their technical capabilities, productivity, and empathy, Nexa is also a very agile team, so I would like to highlight that.How did the company perform from a project management standpoint?Nexa is very good at managing projects. Throughout the engagement, we've faced various IT problems, and Nexa has been a great support team in that regard.Regarding budget management specifically, by the end of 2023, we spent more than we planned. However, those overages were caused by different problems and issues we needed to take care of, so it wasn't Nexa's fault. In fact, they always deliver on time and offer great response times, so we're very happy with them. What did you find most impressive about them?We've worked with other service providers, and our standard benchmark is always Nexa. Something worth mentioning is that I joined my company at the end of 2020, and that was the final month of our first contract with Nexa. Due to the pandemic, we had administration problems on our side. Still, their team was really engaged in trying to help us solve those issues and providing us with advice.Are there any areas they could improve?I can't think of anything Nexa could improve on. As a company in the public sector, costs are something we take into account very seriously, so it would be great if they lowered their costs. However, this isn't an issue right now because we always know and understand the prices they give us for the level of service we receive.Do you have any advice for future clients of theirs?Have confidence in them; they're a great team. Work with Nexa as a partner and leverage their knowledge; they're a provider that will help your organization look forward. --- #### Cybersecurity Services for Healthcare Company **The Project** - Services: Application Management & Support, Cybersecurity - Project size: Confidential - Project length: Jan. 2019 - Ongoing **Project Summary**: Nexa provides cybersecurity services to a healthcare company. Their work has included penetration testing, physical hacking prevention, cybersecurity training, and good practices guidance. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 4.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** CIO, Healthcare Company - Industry: Other industries - Client size: 1,001-5,000 Employees - Review Type: Online Review - Verified **The Review** — Sep 7, 2023 **Feedback Summary**: Thanks to Nexa's services, the client has constant documentation on threats, as well as excellent training and references on improvements and good practices. The team has been professional, organized, open to feedback, and passionate about what they do, which has resulted in quality work. ""I value the search for feedback from the client to continue improving."" **BACKGROUND** Please describe your company and position.I am the CIO of a healthcare companyDescribe what your company does in a single sentence.Company dedicated to patient care and health **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Pent Testphysical hackinggood practices in development and patches and configuration of servers **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?Referred to meethics and passion for what they doHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.In these years with the company Nexa we have done various jobs.Penetration test: associated with internal and external applications, once completed, a report on the findings and method of correction was delivered.Training of good practices: Awareness talks for technical teamsPhysical Hacking: scheduled intrusion instances and with findings and their documentation and way to mitigate problems **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?documentation of findings, training on how to improve, references to good practicesDescribe their project management. Did they deliver items on time? How did they respond to your needs?The company has grown since I started with it and you can see the professionalization, before everything they do everything now they assign a PM to the account that follows the topicWhat was your primary form of communication with Nexa?In-Person MeetingWhat did you find most impressive or unique about this company?Here I have always been surprised by the taste and pleasure for what they do and it is reflected in the work. In addition to my part to talk about the interests for my industryAre there any areas for improvement or something Nexa could have done differently?I believe that there are and they are constantly changing, I value the search for feedback from the client to continue improving and that in some cases it helps to manage professionalism and closeness --- #### Cybersecurity for Technology Company **The Project** - Services: Cybersecurity, IT Managed Services - Project size: Less than $10,000 - Project length: Dec. 2022 - Jan. 2023 **Project Summary**: Nexa was hired by a technology company to conduct ethical testing on their mobile app. The team provided a detailed report along with recommendations and possible solutions to the issues they identified. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Co-Founder & CTO, Lemu - Industry: Other industries - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Mar 15, 2023 **Feedback Summary**: Nexa delivered a detailed report with useful information to strengthen the mobile app's security, meeting the client's expectations. They ensured a seamless workflow by communicating clearly and quickly resolving issues that arose. They impressed with their professionalism and valuable insights. "“The Nexa team was incredibly professional and provided valuable insights throughout our engagement.”" **BACKGROUND** Introduce your business and what you do there. I’m the co-founder and CTO of a technology company. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa? We needed a company that could conduct an ethical hacking of our mobile application to help strengthen its security. **SOLUTION** What was the scope of their involvement? We started the engagement with a kick-off meeting where we defined the project’s scope. They then started conducting the ethical hacking of our mobile app. They conducted two different testing processes. The first one was with our basic application, and the second one was more specific. After that, they sent us an email detailing all of the issues they found, along with recommendations and possible solutions. We finished the engagement with a meeting, wherein we further discussed the different solutions they proposed. What is the team composition? We worked with a testing leader, two hackers, and a commercial manager from Nexa. How did you come to work with Nexa? I reached out to someone I knew that works for Nexa. How much have you invested with them? We spent $6,700 on this project. What is the status of this engagement? We worked together from December 2022–January 2023. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? Nexa provided a detailed report with very specific and useful information about the issues they identified. They also described the specific hacking process through which they found each of these issues and provided great recommendations for solving them. How did Nexa perform from a project management standpoint? Nexa performed well in terms of project management. We communicated directly with the team leader at all times. They communicated all critical issues via email, and their response time was very good. What did you find most impressive about them? The Nexa team was incredibly professional and provided valuable insights throughout our engagement. Are there any areas they could improve? No, we were very happy with their work. --- #### Penetration Tests & Support for B2B Product Dev Company **The Project** - Project size: $10,000 to $49,999 - Project length: Jan. - Dec. 2022 **Project Summary**: A B2B product development company hired Nexa to perform penetration tests on their developed solutions. The team also assessed the client's AWS infrastructure and identified issues in their vendor libraries. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** CIO, BunkerDB - Industry: Advertising & marketing - Client size: 51-200 Employees - Review Type: Online Review - Verified **The Review** — Feb 17, 2023 **Feedback Summary**: The client expressed confidence in their security, thanks to Nexa's work. The team's workflow was excellent. They met deadlines and took the time to call developers to explain the vulnerabilities they found. They also provided solutions for fixing said issues. Overall, they were highly professional.  ""They gave us the time and attention that we needed."" **BACKGROUND** Please describe your company and your position there. I'm the CIO of a Marktech that develops a suites of products B2B oriented. **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? We hired nexa in order to: perform recurrent pentests againt some solutions we develop analyze our infrastructure in AWS from security POV help identify some security troubleshooting in vendor libraries **SOLUTION** How did you select this vendor and what were the deciding factors? We've been working with them since 2020, at the beggining we made some interviews with another cybersec companies, and they seemed to be the more profesionals. Describe the project in detail and walk through the stages of the project. Pentest: Explain to NEXA our solutions & product Provide an aisoleted and freezed environment to perform the tests NEXA performs the pentest NEXA give us the report with analysis and vulnerabilities found We perform the fixes based in NEXA suggestions and documentation NEXA performs a 2nd check in order to validate the fixes were applied Infrastructure Support: We made several calls and meets in order to explain how our product and infra in AWS works, and after that NEXA helps us to identify weak spots that we should enhance or fix (from the performance and security POV) Specific Help in Cybersec Sometimes our clients raise some concerns & suggestions about security issues, and NEXA helps us to identify and categorize this information to provide our clients with a solid answer. How many resources from the vendor's team worked with you, and what were their positions? Comercial CEO (Facundo) CTO (Andres) CIO (Infrastructure, Juan) PM (Diego) Cybersec SR (Sebastián, Javier) **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? We don't have a specific correlative impact (from the economic perspective), but we definitely are more solid in terms of security How effective was the workflow between your team and theirs? Excellent, they comply with the times; they even make several calls with our developer team to explain some vulnerabilities and how to fix them. What did you find most impressive or unique about this company? I think they are very professional. They gave us the time and attention that we needed. Are there any areas for improvement or something they could have done differently? No from my perspective --- #### Cybersecurity Services for Electronic Cigarette Company **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: Oct. 2020 - Ongoing **Project Summary**: Nexa provides cybersecurity services to an electronic cigarette company. The team is in charge of performing a cybersecurity audit and assessment of the client’s IT infrastructure and providing their insights. **Review Rating**: 4.5 - Quality: 5.0 - Schedule: 4.5 - Cost: 5.0 - Willing to Refer: 4.5 **The Reviewer** VP of Operations, Electronic Cigarette Company - Industry: Manufacturing - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Feb 10, 2023 **Feedback Summary**: Nexa has performed a thorough and well-thought-out cybersecurity assessment, constantly thinking of various scenarios and demonstrating their vast expertise. The team delivers on time and has regulatory compliance expertise, which is impressive. They communicate via MS Teams and email. "“They’ve done exactly what we’ve hired them to do.”" **BACKGROUND** Introduce your business and what you do there.I’m the VP of operations at an electronic cigarette manufacturer and seller in the US. In my role, I’m responsible for implementing technical solutions within the company, as well as other solutions for our customers. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?We hired Nexa to be our cybersecurity partner. **SOLUTION** What was the scope of their involvement?Nexa provides us with their cybersecurity expertise. Their team has come in to review and audit our IT infrastructure and provide us with a cybersecurity assessment document with their feedback. All of their services have been off-site.What is the team composition?We work with three teammates from Nexa: an engineering team leader, an account manager, and an engineer.How did you come to work with Nexa?I wasn’t part of the hiring process, and the person in charge no longer works at my company. Still, I believe Nexa came as a recommendation while we were doing research.What is the status of this engagement?We started working together in October 2021, and our engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? Nexa’s work tends to be thorough and well-thought-out. They follow directions well and almost always think of scenarios that we might haven’t thought about. Given that they do this kind of work for other clients, they bring the great level of expertise that they’ve developed with experience to the table — that’s what we’re looking for.How did Nexa perform from a project management standpoint?Nexa offers timely responses, acknowledges their work, and delivers on the agreed-upon timelines almost always. This is a complicated project, so it’s not always possible to meet the deadlines. However, whenever some task will be delayed, they let us know in advance.We communicate via email and Microsoft (MS) Teams. On MS Teams, we have a channel dedicated to this project where members of both teams can communicate, share files, and provide updates.What did you find most impressive about them?Nexa has done a lot of work with clients in regulated industries, which is great for us. Cybersecurity is one thing, but being able to understand the regulatory requirements of cybersecurity is a whole other thing.We’re regulated by the FDA, and Nexa has done a lot of work regarding FDA regulatory compliance, which adds value to their cybersecurity services. For example, they know different classifications of cybersecurity usage for applications; that kind of knowledge isn’t easily findable on other service providers.Are there any areas they could improve?I don’t have any areas of improvement for Nexa. They’ve done exactly what we’ve hired them to do.Do you have any advice for potential customers?Be clear and prescriptive in your requirements and do constant checks to ensure that the work being done is what you’re asking for. If you’re clear on what you want, they’ll do what you need them to do. --- #### IT Services for Tools Distributor **The Project** - Services: IT Managed Services - Project size: Less than $10,000 - Project length: Mar. 2021 - Ongoing **Project Summary**: A tools distributor hired Nexa to provide IT services. They support the client with their Linux UC 10 OS and offer proactive suggestions to improve their IT structure and performance. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Head of IT, Orofino - Industry: Other industries - Client size: 11-50 Employees - Review Type: Phone Interview - Verified **The Review** — Oct 20, 2022 **Feedback Summary**: The client is delighted with Nexa Inc's trustworthy and solid work, which adds value to their business. Nexa Inc also meets deadlines, stays within budget, and is flexible seamlessly. The client also praises their professionalism and neat work on every project. "''Nexa Inc creates clear instructional materials that have saved us a lot of work.''" **BACKGROUND** Introduce your business and what you do there. I’m the head of IT of a tools importing and distribution company. **OPPORTUNITY / CHALLENGE** What challenges were you trying to address with Nexa Inc? We needed help with IT services for everything related to our SQL database. **SOLUTION** What was the scope of their involvement? Nexa Inc has provided maintenance and a follow-up of improvement indicators, based on which they make improvement proposals to enhance our database’s performance. Among the suggestions they made is a risk analysis to help us create an action plan to face a potential database failure of a server’s breakdown. In addition, they’ve helped us with support for our Linux UC 10 OS. What was the team composition?  We’ve worked with two members of their team, including an IT manager and someone from their support staff. How did you come to work with Nexa Inc? Nexa Inc was recommended to us by our previous service provider, and after the first interview, they seemed professional, so we started working with them. How much have you invested in them? So far, we’ve spent around $5,000 with them. What is the status of this engagement? We started working with them in March 2021, and the engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? They’re trustworthy, solid, and provide great added value to our business — their services are essential.  How did Nexa Inc perform from a project management standpoint? They’re perfect with meeting timelines, staying within budgets, and overall project management, which is very important for us — knowing that we could find an alignment with them in that regard has been key for us. Moreover, they’re flexible but always careful about finding the proper time to work in a way that doesn't interfere with our business. Regarding tools, we use phone calls and WhatsApp besides our ticketing system — it depends on the urgency of the matter we want to communicate to them. What did you find most impressive about them? Their best attributes are professionalism, neat work, and the documentation they provide after finishing any project. Nexa Inc creates clear instructional materials that have saved us a lot of work. Are there any areas they could improve? I don’t think there’s anything they can improve on. Do you have any advice for potential customers? You can be sure that they will adapt to your requirements and time availability. --- #### Database Management for Integrated Solutions Provider **The Project** - Services: Cybersecurity, IT Managed Services - Project size: $50,000 to $199,999 - Project length: July 2021 - Ongoing **Project Summary**: Nexa provides database management and cybersecurity support for an integrated solutions provider. The team is tasked with managing all of an end client's 40 databases. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Infrastructure Manager, Intec Asociados - Industry: Other industries - Client size: 11-50 Employees - Review Type: Phone Interview - Verified **The Review** — Oct 4, 2022 **Feedback Summary**: Nexa's support minimizes the databases' downtimes and issues, meeting the client's expectations. The team excels at project management — they are responsive, accessible, and quick to resolve issues and attend to the client's needs. They leverage their industry expertise into top-notch solutions. "“We’re most impressed with Nexa’s data management expertise and experience.”" **BACKGROUND** Introduce your business and what you do there. I’m an infrastructure manager at an integrated solutions company. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa? We needed help with database management. **SOLUTION** What was the scope of their involvement? Nexa provides us with database management and cybersecurity support. They’re primarily tasked with managing one of our client’s 40 databases. What is the team composition? We’ve worked with four people from Nexa, including a project manager, a database expert, an SQL expert, and one other person in charge of reporting. How did you come to work with Nexa? We found Nexa through a referral. How much have you invested with them? We spend around $10,000 per month. What is the status of this engagement? We started working together in July 2021, and the engagement is ongoing. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? Since we started working with Nexa, we haven’t had any issues or downtimes with our client’s databases. How did Nexa perform from a project management standpoint? Nexa excels at project management. They’re highly accessible and always responsive to our requests and questions. They’re also quick to resolve any support tickets. We use OTRS as our ticketing system and Microsoft Teams for communication and project management. We also communicate through email, video calls, and WhatsApp. What did you find most impressive about them? We’re most impressed with Nexa’s data management expertise and experience. Are there any areas they could improve? No. Do you have any advice for potential customers? Make sure to give them the freedom to do their work and to trust their opinion, because they always provide great advice and ideas. --- #### Penetration Testing & Wearable Device Design for Software Co **The Project** - Services: Application Testing, Custom Software Development, Cybersecurity - Project size: $10,000 to $49,999 - Project length: Oct. 2020 - Mar. 2022 **Project Summary**: Nexa provided white and black box penetration testing to a software company's SaaS solutions. They also proposed a secure and FDA-compliant architecture for the client's wearable device. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** CTO, Software Company - Industry: Other industries - Client size: 51-200 Employees - Review Type: Online Review - Verified **The Review** — Aug 1, 2022 **Feedback Summary**: Nexa wouldn't stop until they found high vulnerabilities every time they executed a penetration test, helping the client ensure the cybersecurity of their products. Moreover, the FDA approved the architecture they proposed for the client's wearable device. The client lauded their smooth process. ""They think out of the box."" **BACKGROUND** Please describe your company and your position there. CTO of a Software Factory **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? We hired Nexa for two different projects and services: Recurring pentests on a SaaS solution with multiple APIs and standalone applications running on the client servers. Advise and propose a secure architecture for a wearable device, which was to be approved and regulated by the FDA. **SOLUTION** How did you select this vendor and what were the deciding factors? Word of mouth. We heard nothing but good things about their service. Describe the project in detail and walk through the stages of the project. We partnered for a diverse set of Cybersecurity projects and activities such as: Cybersecurity and Secure Software Development Life Cycle (SSDLC) training & awareness workshops Secure infrastructure, architecture & application analysis, and design for our company. Cybersecurity practices auditing.  "White box" development lifecycle code analysis, infrastructure management, component management, integration, and risk assessment, proactively identifying security risks and addressing the corresponding remediation with the team.  Final "black box" quality assurance activities for the company, clients, and partners, including penetration tests for release candidates and running products, producing complete prioritized diagnosis documentation, recommendations, and remediation alternatives. How many resources from the vendor's team worked with you, and what were their positions? 1 Security Advisor 2 Senior Engs. 1 Project Leader **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? Every time they executed a pentest, they found high vulns. They won't stop until they do. The wearable device solution was approved by FDA. How effective was the workflow between your team and theirs? Smooth process and well communicated. Very flexible in terms of process. Agile and result-oriented. What did you find most impressive or unique about this company? The "hand-crafted" services they provide. Plenty of these companies in the market offer similar services, but all those will run automated tools and hand over the reports. This is different; they think out of the box. Are there any areas for improvement or something they could have done differently? Nothing I can think of. --- #### Cybersecurity Services for Digital Agency **The Project** - Services: Cybersecurity, Other IT Consulting and SI - Project size: Less than $10,000 - Project length: Apr. 2022 - Ongoing **Project Summary**: Nexa handles cybersecurity services for a digital agency. The team is helping the client identify any vulnerabilities within their IT infrastructure, websites, and apps. They also provide maintenance support. **Review Rating**: 4.5 - Quality: 4.5 - Schedule: 5.0 - Cost: 4.0 - Willing to Refer: 5.0 **The Reviewer** CEO, Digital Agency - Industry: Advertising & marketing - Client size: 51-200 Employees - Review Type: Phone Interview - Verified **The Review** — Jul 26, 2022 **Feedback Summary**: So far, Nexa has been doing a great job — they’ve helped the company pinpoint 16 issues based on their penetration test report. The team maintains regular communication via email and phone calls, and they continue to deliver quality services in a timely fashion. ""I’m impressed that they’ve adhered to all deadlines because we usually see a lot of slippages in this industry."" **BACKGROUND** Introduce your business and what you do there. I’m the CEO of a digital agency that does website development for mostly US clients. We also provide digital marketing and data analytics services. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa? We hired Nexa to help us with the IT security of the products we developed for our clients. **SOLUTION** What was the scope of their engagement? Nexa conducts corporate penetration tests for websites and applications. In this process, they help us find many vulnerabilities and technical security problems, which they compile in a PDF report. Currently, they are providing maintenance services for us. What is the team composition? I work with three people from their team, including Andres (CTO & Director) who’s our main point of contact. How did you come to work with Nexa? We found out about them through Andres, who’s a former employee of our company. How much have you invested with them? We’ve spent about $10,000 on this project. What is the status of the engagement? We started working with them in April 2022, and our engagement is still ongoing. We plan to keep working with them in the future for consultations and monitoring our infrastructures. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? Their work has exceeded our expectations. Initially, we expected them to come up with 10–15 vulnerabilities, but they gave us 16 in their report, and a couple of those issues were critical. How did Nexa perform from a project management standpoint? They’ve done surprisingly well in this regard and continue to deliver on time. We mainly communicate via phone calls and email. What did you find most impressive about them? I’m impressed that they’ve adhered to all deadlines because we usually see a lot of slippages in this industry. Are there any areas they could improve? No, they’re doing just fine. Any advice for potential customers? Make sure to define the scope of work carefully to ensure a successful project. --- #### Cybersecurity Services for Financial Services Company **The Project** - Services: Cybersecurity - Project size: Less than $10,000 - Project length: June 2022 **Project Summary**: Nexa conducted cybersecurity services for a financial services firm. This involved doing a security audit of the client's website and web apps. They also did penetration tests to scan for vulnerabilities. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Trading Desk, Financial Services Company - Industry: Financial services - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Jul 13, 2022 **Feedback Summary**: Through Nexa's efforts, the client was able to discover critical issues and is currently addressing them. The team led a smooth workflow and leveraged their knowledge and technical expertise to provide effective solutions within the project's budget. ""They were really thorough with their work."" **BACKGROUND** Please describe your company and your position there. We are a uruguayan stockbroker company. I am currently working in trading desk and I also coordinate projects related to automation and IT. **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? We were looking for a n external cybersecurity company to perform a security audit of our website. Because we work in financial services, confidenciality and data integrity are high priority and we needed to make sure there were no potential risks we were not aware of. **SOLUTION** How did you select this vendor and what were the deciding factors? We compared two local companies and finally chose Nexa because we felt their approach was more suitable for our company's needs. Describe the project in detail and walk through the stages of the project. They performed a thorough security audit of our website and web apps, identifying potential risks in our infrastructure. They carry out a penetration testing to scan for vulnerabilities. After they finished, they delivered a report on all of our risks and provided a list of security recommendations. Our IT department is now working on the detected issues. How many resources from the vendor's team worked with you, and what were their positions? We had a team formed by the CTO as the project leader, a technical account manager and customer success responsible. Also an ethical hacking team of 8 professionals. **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? They were able to identify some critical risks that we are now working on. Recommendations were really helpful. We believe they were really thorough with their work. How effective was the workflow between your team and theirs? Workflow was effective enough. What did you find most impressive or unique about this company? We appreciate that they offered multiple solutions to suit our budget. Are there any areas for improvement or something they could have done differently? We believe there are no areas for improvements that we know of. --- #### Security Assessment Services for Software Provider **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: Nov. 2021 - Ongoing **Project Summary**: Nexa has been providing security assessment services for a software provider. The project has been divided into the data gathering and planning stage, the implementation stage, and the final adjustments stage. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** Cybersecurity Lead, VU Security - Industry: Other industries - Client size: 201-500 Employees - Review Type: Online Review - Verified **The Review** — Apr 1, 2022 **Feedback Summary**: Nexa has prepared the client for their ISO certification process. The engagement has been highly effective, and the team consists of exceptional professionals. Overall, the team's knowledge and expertise has been helpful, and they have been sharing their knowledge with the client as well. ""They have specialized professionals in each project they handle."" **BACKGROUND** Please describe your company and your position there. It is a company that develops identity protection software through biometric and fraud prevention technologies. My position is Cybersecurity Lead and I am in charge of leading the company's security strategy and ensuring its correct implementation. **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? For security assessment services, security in SDLC, Pentest and automation of security processes   **SOLUTION** How did you select this vendor and what were the deciding factors? through referrals from acquaintances Describe the project in detail and walk through the stages of the project. The last project we did together was on security in the company's development life cycle. It was divided into 3 stages, the information gathering and solution diagramming stage, the implementation stage and the final details adjustment stage. The project basically allows security controls to be applied in an automated manner throughout the development life cycle, thus allowing products to maintain quality at a security level and in an agile manner during their development. How many resources from the vendor's team worked with you, and what were their positions? Around 10 or a little more members, which ranged from specialists, leaders and C-levels **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? The project helped us to face the ISO27001 certification process, which we are about to present this month, the clear evidence would be the correct certification of the process. How effective was the workflow between your team and theirs? It was super effective in a pleasant environment, they are excellent professionals with a lot of knowledge and always willing to share their knowledge and teach every detail What did you find most impressive or unique about this company? It is a company with very young and highly specialized professionals. They have specialized professionals in each project they handle. Are there any areas for improvement or something they could have done differently? At the moment I have no complaints or points to mark, I am totally satisfied with the service provided --- #### Penetration Testing for Wealth Management Platform **The Project** - Services: Cybersecurity - Project size: $10,000 to $49,999 - Project length: Aug. - Sep. 2021 **Project Summary**: Nexa IT was hired by a wealth management platform to conduct penetration testing on their app. This involved trying to breach the client's system with and without the user authorization and login credentials. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Managing Director, Wealthsite - Industry: Other industries - Client size: 11-50 Employees - Review Type: Phone Interview - Verified **The Review** — Nov 30, 2021 **Feedback Summary**: Nexa IT successfully identified minor and significant vulnerabilities within the client's system and provided recommendations on how they could resolve those issues. The organized team established and strictly adhered to a specific schedule and budget. They were communicative and professional. "“I was really impressed with Nexa IT’s credibility, expertise, and professionalism.”" **BACKGROUND** Introduce your business and what you do there. I’m the managing director at Wealthsite, a wealth management platform. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa IT? We needed someone to help us make sure that the environment in our application was secure from any threats of malicious intent. **SOLUTION** What was the scope of their involvement? We hired Nexa IT to perform a penetration test on our application. We started the project by going through several sales meetings to try to get an understanding of the services they’re offering us, after which they came back with a statement of work. This included all the details about the process, the deliverables, our responsibilities, and their pricing proposal. Once we agreed to their proposal, we sent over the information they would need such as IP addresses and several login credentials. They broke down the project into two parts — the first part involved testing to see if they could breach our system without any authorization, and the second part involved using the login credentials we provided to see if a valid user could access data they shouldn’t be able to access. After we finished the testing, they provided us with recommendations on how we could resolve the issues they identified. What is the team composition? We worked with four people from Nexa IT. They were each involved in different aspects of the project. How did you come to work with Nexa IT? Nexa IT was recommended to us by a third-party development company that we’ve worked with for a long time. How much have you invested with them? We spent $10,000 on this project. What is the status of this engagement? We worked with them on this project from August–September 2021. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement? Nexa IT identified some minor and significant deficiencies in our app. The good thing is that they were unable to gain access without the login credentials, which was our biggest fear. Overall, we were very pleased with the outcome of this project. How did Nexa IT perform from a project management standpoint? Nexa IT performed exceptionally well in terms of project management. They laid out a specific schedule and budget, and they were very good at sticking to it. They also communicated well despite working fully remotely. What did you find most impressive about them? I was really impressed with Nexa IT’s credibility, expertise, and professionalism. Do you have any advice for potential customers? Make sure to go into the project with a good understanding of the outcomes you’re trying to achieve. Penetration testing is a generic term, so it would be very beneficial for both you and Nexa IT to understand precisely what you’re hoping to accomplish so that they know what services they need to provide. --- #### Cybersecurity for Postal Service Company **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: Mar. - May 2024 **Project Summary**: Nexa provided cybersecurity services for a postal service company. The team analyzed the web and networks, conducted leak analysis, monitored code repositories and the open web, and provided recommendations. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** IT Manager, Correo Uruguayo - Industry: Other industries - Client size: 1,001-5,000 Employees - Review Type: Online Review - Verified **The Review** — Nov 7, 2025 **Feedback Summary**: Nexa identified compromised credentials and finalized a report detailing all deliverables. The team delivered work quickly, understood the problem well, and had a proven work methodology. Nexa also provided constant feedback and communicated clearly through email and a messaging app. ""We were fully satisfied."" **BACKGROUND** Please describe your company and position.I am the IT Manager of Correo UruguayoDescribe what your company does in a single sentence.National Postal Service **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Analyze vulnerabilities in the VPN access system **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?Great culture fitReferred to meCompany values alignedHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.To provide a detailed account of the illicit activities detected in the digital surveillance service managed by Nexa that are of our interest. It focuses on revealing and contextualizing these cyber threats that could directly or indirectly affect, thus facilitating the adoption of proactive measures.Key deliverables:Activity on the dark web and illicit networksLeak analysisMonitoring code repositories and the open webMonitoring communications and transactions on anonymous networksRecommendations **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?They identified potentially compromised credentials and reported them quickly so that proactive measures could be taken. Then they finalized a report detailing all the deliverables they had committed to.Describe their project management. Did they deliver items on time? How did they respond to your needs?They did delivered quickly and that was exactly what we needed.What was your primary form of communication with Nexa?Email or Messaging AppWhat did you find most impressive or unique about this company?Very quick understanding of the problem. Established and proven work methodology. Constant feedback throughout the process. Clarity in the resulting reports.Are there any areas for improvement or something Nexa could have done differently?Can't find. We were fully satisfied. --- #### Cybersecurity & Ethical Hacking Services for Banking Group **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: Oct. 2023 - Ongoing **Project Summary**: Nexa has provided ethical hacking services for a banking group. The team has been tasked with conducting ethical hacking on key applications. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** CISO, Banking Group - Industry: Banks - Client size: 501-1,000 Employees - Review Type: Online Review - Verified **The Review** — Aug 20, 2025 **Feedback Summary**: Nexa has successfully delivered ethical hacking reports on time. The team has shown a high level of technical excellence and professionalism. Moreover, their project management and communication skills via in-person and virtual meetings are great. This has led to a fruitful engagement. ""From my perspective, everything went smoothly."" **BACKGROUND** Please describe your company and position.I am the CISO of a bankDescribe what your company does in a single sentence.Finance group **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Ethical Hacking **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?High ratingsClose to my geographic locationGood value for costReferred to meHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.Ethical hacking on key applications **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?Delivery of ethical hacking reports on time according to project schedule.Describe their project management. Did they deliver items on time? How did they respond to your needs?Yes, the management is great and the communication is fluent.What was your primary form of communication with Nexa?In-Person MeetingVirtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?What I found most unique about the company is the high level of technical excellence and professionalism within the teamAre there any areas for improvement or something Nexa could have done differently?From my perspective, everything went smoothly and I have no suggestions for improvement. --- #### Pentesting Services for Payment Solutions Company **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: May - July 2025 **Project Summary**: Nexa conducted a pentest on a self-service terminal network, domain, and infrastructure to identify weaknesses and vulnerabilities. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Financial Manager, BLinnova - Industry: Other industries - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Aug 12, 2025 **Feedback Summary**: Nexa's work strengthened the product and improved the client's image and integrity with partners and clients. Nexa's team was excellent at meeting deadlines and communicating through various channels. Their professionalism, proactivity, and in-depth work were impressive. ""La calidad profesional de su equipo, la proactividad, fueron a fondo en todo lo que tuvieron a su alcance."" **BACKGROUND** Introduce your business and what you do there.Soy el CFO de Blinnova, una empresa que ofrece soluciones integrales adaptables para satisfacer las necesidades específicas de cada cliente mediante tótems de autogestión para el pago de prestaciones y otras consultas. **OPPORTUNITY / CHALLENGE** What challenge were you trying to address with Nexa?Necesitábamos saber sobre las debilidades y vulnerabilidades en nuestra red de tótems de autogestión. **SOLUTION** What was the scope of work with Nexa?Nexa realizó un pentest a través de nuestras terminales, dominio e infraestructura de manera muy proactiva y profunda. Se encontraron vulnerabilidades y debilidades que debemos mejorar.What is the team composition?Trabajamos con tres compañeros de Nexa.How did you come to work with Nexa?Los encontramos a través de un amigo muy cercano que trabaja para Nexa. Supimos a través de otras compañías sobre la muy buena calidad del trabajo que Nexa realiza.What is the status of this engagement?El proyecto se realizó entre enero y julio de 2025. **RESULTS & FEEDBACK** What evidence can you share that demonstrates the impact of the engagement?Fortalecieron nuestro producto, así como nuestra integridad e imagen frente a nuestros partners y clientes. Somos más conscientes del uso de buenas prácticas en materia de ciberseguridad.How did Nexa perform from a project management standpoint?Fueron excelentes en el manejo de plazos y en su trato con nosotros durante todo el proyecto. La comunicación fue presencial, telefónica, por correo electrónico, videollamadas y mensajes de WhatsApp.What did you find most impressive about them?La calidad profesional de su equipo, la proactividad, fueron a fondo en todo lo que tuvieron a su alcance y nunca perdieron la calidad en el trato con nosotros, explicando todo paso a paso y haciendo entender a nuestro equipo no técnico.Are there any areas they could improve?No tengo nada para decir al respecto. --- #### Cybersecurity for Utility Company **The Project** - Services: Cybersecurity - Project size: $50,000 to $199,999 - Project length: Jan. 2023 - Ongoing **Project Summary**: Nexa has provided ethical hacking services for a utility company. The team has tested the client's mobile app and IoT interfaces. **Review Rating**: 4.5 - Quality: 4.5 - Schedule: 4.5 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** Security information mg, UTE - Industry: Utilities - Client size: 5,001-10,000 Employees - Review Type: Online Review - Verified **The Review** — Mar 18, 2025 **Feedback Summary**: Nexa's efforts have received positive acclaim from the client. The team has been quick in their findings and identified critical vulnerabilities in the client's systems. Nexa is responsive and communicates effectively via email, messaging apps, and virtual meetings. ""They are great."" **BACKGROUND** Please describe your company and position.I am the Security information mg of UTEDescribe what your company does in a single sentence.Utilities  **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Security informationethical hacking **SOLUTION** How did you find Nexa?Framework Agreement with AGESICWhy did you select Nexa over others?Close to my geographic locationPricing fit our budgetGood value for costDescribe the scope of work in detail. Please include a summary of key deliverables.Ethical hacking of different developments, UTE mobile app and interface with IoT **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?vulnerabilities/ criticity - found over de ethical hackingDescribe their project management. Did they deliver items on time? How did they respond to your needs?They are great.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?the celerity onthe findingsAre there any areas for improvement or something Nexa could have done differently?not really --- #### Managed IT, DevOps & Cybersecurity for Healthcare Org **The Project** - Services: Cybersecurity, IT Managed Services, IT Strategy Consulting - Project size: $50,000 to $199,999 - Project length: June 2023 - June 2024 **Project Summary**: Nexa provides managed IT, DevOps, and cybersecurity services for a healthcare financing organization. The team has implemented a CI/CD pipeline, upgraded processes, migrated data, and done automation. **Review Rating**: 4.5 - Quality: 4.5 - Schedule: 4.5 - Cost: 4.5 - Willing to Refer: 5.0 **The Reviewer** Deputy Head of IT Unit, Fondo Nacional de Recursos - Industry: Other industries - Client size: 51-200 Employees - Review Type: Online Review **The Review** — Feb 19, 2024 **Feedback Summary**: The client is happy with Nexa's work; the team delivers monthly reports and evaluates the use of various technologies. Nexa excels at project management with on-time delivery and quick responses to planned and unforeseen requests. Moreover, they display flexibility and professionalism in their work. ""What I find most impressive or unique about Nexa is their ability to take on any issue."" **BACKGROUND** Please describe your company and position.I am the Deputy Head of IT Unit of Fondo Nacional de RecursosDescribe what your company does in a single sentence.Fondo Nacional de Recursos is an Uruguayan public entity that finances high-cost, high-complexity health care procedures, devices, and medications for all people residing in the country with health coverage through the SNIS. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?IT infrastructure management and renewalDrive the adoption of DevOps methodologiesStrengthen IT security to protect critical data and systems **SOLUTION** How did you find Nexa?We became aware of Nexa through a previous project where another company hired them.Why did you select Nexa over others?Great culture fitGood value for costCompany values alignedHow many teammates from Nexa were assigned to this project?6-10 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.The scope of work includes the following three main areas: DevOps: Implement DevOps tools and processes to improve the speed and quality of software development. Infrastructure: Update and maintain the FNR's IT infrastructure, including migrating to an alternate data center, evaluating the cloud, and automating tasks. Security: Perform security tests, manage software obsolescence, administer firewalls, implement new security technologies, and update systems. Some key deliverables: Implementation of a CI/CD pipeline Continuous integration Automatic deployment Upgrade of development tools and processes Migration to an alternate data center Cloud feasibility assessment Implementation of new security technologies Update of operating systems and software Improvement of the AWX/Ansible automation solution Adoption of IaC processes Resolution of failure cases in critical services Security testing Software obsolescence management Firewall rules administration Implementation of a centralized log system Security monitoring IT security training for FNR staff **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?Monthly reports from the company Evaluation and use of the different technologies implemented by FNR staffDescribe their project management. Did they deliver items on time? How did they respond to your needs?Nexa's project management is excellent. They deliver items on time and respond to our needs quickly, both for planned items and for unforeseen issues that arise.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?What I find most impressive or unique about Nexa is their ability to take on any issue, regardless of whether it was planned or not, their seriousness towards their work, and their flexibility when needed.Are there any areas for improvement or something Nexa could have done differently?At this stage of the project, we are not aware of any areas for improvement or anything Nexa could have done differently. --- #### IT Managed Services for Financial Service Company **The Project** - Services: Application Management & Support, IT Managed Services, Other IT Consulting and SI - Project size: Confidential - Project length: Jan. 2017 - Ongoing **Project Summary**: A financial service company has hired Nexa to provide IT-managed services. The team helps the client solve day-to-day problems and implement different improvements. **Review Rating**: 3.5 - Quality: 5.0 - Schedule: 3.0 - Cost: 3.0 - Willing to Refer: 5.0 **The Reviewer** Department Head, Financial Service Company - Industry: Financial services - Client size: 501-1,000 Employees - Review Type: Online Review - Verified **The Review** — Feb 5, 2024 **Feedback Summary**: Nexa’s efforts have been met with positive acclaim. The team executes good work to face any arousing challenges. They communicate through in-person meetings, and their experience and deep knowledge in the IT field stands out. ""The team's experience and knowledge is impressive."" **BACKGROUND** Please describe your company and position. I am a Department Head of a financial services company Describe what your company does in a single sentence.We are a Uruguayan company whose main objective is to provide quality services in the transactional collection and payment market. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Quality help with IT problems **SOLUTION** How did you find Nexa?ReferralOtherWhy did you select Nexa over others?Close to my geographic locationGreat culture fitCompany values alignedDescribe the scope of work in detail. Please include a summary of key deliverables.They help us with day-to-day problems or improvements in different services. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?Work well done in the face of inconveniencesDescribe their project management. Did they deliver items on time? How did they respond to your needs?...What was your primary form of communication with Nexa?In-Person MeetingWhat did you find most impressive or unique about this company?The team's experience and knowledge is impressive.Are there any areas for improvement or something Nexa could have done differently?no --- #### Cloud Consulting for ERP Development Company **The Project** - Services: Cloud Consulting & SI - Project size: Less than $10,000 - Project length: May - Aug. 2023 **Project Summary**: An ERP development company hired Nexa for cloud consulting. The team assessed and implemented a safe, available, and scalable cloud-based platform for a SaaS site. **Review Rating**: 4.0 - Quality: 4.0 - Schedule: 4.0 - Cost: 3.0 - Willing to Refer: 4.5 **The Reviewer** Director, Insis - Industry: Other industries - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Jan 12, 2024 **Feedback Summary**: Nexa was responsive to the client's needs. Nexa's team used virtual meetings and email as their main communication tools. The client also praised the team's professionalism and disposition approach. ""The team responded well to our needs."" **BACKGROUND** Please describe your company and position.I am the Director of InsisDescribe what your company does in a single sentence.We develop and implement ERP software **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Advice on infrastructure to run our applications.Analysis of performance problemsDesign of a cloud platform to provide SAAS service **SOLUTION** How did you find Nexa?ReferralOtherWhy did you select Nexa over others?Close to my geographic locationReferred to meHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.Implement a container-based, secure, highly available and scalable cloud platform to provide SAAS services to our ERP clients. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?no applicableDescribe their project management. Did they deliver items on time? How did they respond to your needs?The team responded well to our needs. It took longer than expected.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?The professionalism and good disposition of the assigned personnel.Are there any areas for improvement or something Nexa could have done differently?- --- #### Cybersecurity for Financial Services Company **The Project** - Services: Cybersecurity - Project size: Confidential - Project length: Jan. - Nov. 2023 **Project Summary**: Nexa provided penetration testing for a financial services company. The team created and executed cases to analyze possible application security vulnerabilities and provided a detailed report. **Review Rating**: 4.5 - Quality: 4.5 - Schedule: 4.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Tech Lead, Financial Services Company - Industry: Financial services - Client size: 501-1,000 Employees - Review Type: Online Review **The Review** — Nov 24, 2023 **Feedback Summary**: Nexa successfully delivered a complete, detailed document that explained each vulnerability with its possible solution. The team was timely, effective, responsive, and communicative through emails and messages. Overall, they stood out for their excellent customer service and professionalism. ""Their speed ​​of attention, quality of the results generated, and good detail in the reports were impressive."" **BACKGROUND** Please describe your company and position.I am the TechLead of a financial services company Describe what your company does in a single sentence.Financial services **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Penetration tests **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?Good value for costReferred to meHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.Creation and execution of cases to analyze possible application security vulnerabilities. Delivery of a detailed report, with evidence of the tests and vulnerabilities found, grouped by risk level of the incident. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?The delivery of a complete document with details of all the tasks carried out, explanation of each vulnerability found and details of its possible solution.Describe their project management. Did they deliver items on time? How did they respond to your needs?Everything in time and form.What was your primary form of communication with Nexa?Email or Messaging AppWhat did you find most impressive or unique about this company?Their speed ​​of attention, quality of the results generated, and good detail in the reports were impressive.Are there any areas for improvement or something Nexa could have done differently?At the moment, no. --- #### Security Assessment & Penetration Testing for IT Support Co **The Project** - Services: Cybersecurity - Project size: Less than $10,000 - Project length: November 2023 **Project Summary**: Nexa performed security assessment and penetration testing on an IT support company's new web platform. Nexa determined the impact of a security failure and delivered a report with recommendations. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Tech Lead, ORMEN - Industry: Other industries - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Nov 23, 2023 **Feedback Summary**: Nexa delivered a detailed report documenting the penetration testing process, including a comprehensive explanation of the identified vulnerabilities. Nexa's technical knowledge and customer-centric approach were impressive. Nexa met deadlines and was constantly available to answer queries. ""The technical knowledge of the Nexa team was impressive."" **BACKGROUND** Please describe your company and position.I am the Tech Lead of ORMENDescribe what your company does in a single sentence.Software and hardware support for the operation of national lottery games. **OPPORTUNITY / CHALLENGE** What specific goals or objectives did you hire Nexa to accomplish?Security Assesment and PentestingImplementation, consulting, and monitoring of databases architecture **SOLUTION** How did you find Nexa?ReferralWhy did you select Nexa over others?High ratingsClose to my geographic locationGreat culture fitGood value for costCompany values alignedHow many teammates from Nexa were assigned to this project?2-5 EmployeesDescribe the scope of work in detail. Please include a summary of key deliverables.Penetration testing on a new web platform in implementation. It includes exploring the application and determining the impact of a security failure on system integrity, information confidentiality, internal infrastructure, and system availability. Upon completing the analysis, a detailed report is presented indicating the findings and recommendations to mitigate all detected vulnerabilities, as well as detailing weaknesses that could be addressed to strengthen the application's security. **RESULTS & FEEDBACK** What were the measurable outcomes from the project that demonstrate progress or success?Detailed report with step-by-step procedures used in the tests, documenting the entire penetration process. Includes a comprehensive explanation of the identified vulnerabilities and how to resolve them.Describe their project management. Did they deliver items on time? How did they respond to your needs?The project management and follow-up were excellent, being available at all times for any doubts or queries that might arise from our side. The delivery times were respected as agreed upon.What was your primary form of communication with Nexa?Virtual MeetingEmail or Messaging AppWhat did you find most impressive or unique about this company?The technical knowledge of the Nexa team was impressive, and their customer-oriented approach makes them a pleasant company to work with. They are willing to discuss the scope of projects to ensure customer satisfaction.Are there any areas for improvement or something Nexa could have done differently?Nothing that comes to mind at this moment. --- #### Hardening Servers for Consumer Service Company **The Project** - Project size: $10,000 to $49,999 - Project length: Mar. 2022 - Feb. 2023 **Project Summary**: Nexa provided IT consulting and SI services for a consumer service company. The team analyzed the client's situation and made a detailed plan to correct gaps detected. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** CISO, Consumer Service Company - Industry: Financial services - Client size: 201-500 Employees - Review Type: Online Review - Verified **The Review** — Feb 18, 2023 **Feedback Summary**: Thanks to the Nexa team, the client successfully improved the hardening status of their workstations. According to their corporate guides, they went from 70% of compliance to 97%. The client described the communication with the vendor was very clear and positive. ""They are providers, but they have the same compromise of full-time employees. They are technically brilliant."" **BACKGROUND** Please describe your company and your position there. I'm the CISO of a consumer service company, with more than 100 brsnches in Uruguay. **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? Hardening Linux servers Hardening Windows servers and workstations Solve Vulnerabilities in web servers Solve complex Linux problems Deploy of Red Hat Satellite **SOLUTION** How did you select this vendor and what were the deciding factors? We select the vendor because we had good references from othee collegues. The deciding factor was the technical expertise of the team. Describe the project in detail and walk through the stages of the project. They analized the current situation of our company, and made a detailed plan to correct the gaps detected. How many resources from the vendor's team worked with you, and what were their positions? We worked with a team of 4 resources and a team Leader. We usually talked to the company owners, who were supervising the whole project. **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? We improved the hardening status of the workstations, acording to the corporate guides, from 70% of compliance, to 97% of compliance. How effective was the workflow between your team and theirs? We communicate by mail, phone and made frequent meetings. The communication was very clear and positive. What did you find most impressive or unique about this company? They are providers, but they have the same compromise of full time employee. They are technically brillant. Are there any areas for improvement or something they could have done differently? No --- #### Managed IT Services for Engineering & Construction Firm **The Project** - Services: IT Managed Services - Project size: $10,000 to $49,999 - Project length: Jan. - Dec. 2022 **Project Summary**: Nexa provided managed IT services for an engineering and construction firm. They were responsible for PostgreSQL database management, cybersecurity, general consultation, and backend configuration. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** CIO, Saceem - Industry: Other industries - Client size: 501-1,000 Employees - Review Type: Online Review - Verified **The Review** — Dec 23, 2022 **Feedback Summary**: Thanks to Nexa, the company has been able to seamlessly access their databases and generate high-quality scripts to improve the query process. The team was highly efficient, and internal stakeholders were particularly impressed with the vendor's responsiveness and meticulous approach. ""Their strengths are their proactive attitude and ability to recommend improvements to the process."" **BACKGROUND** Please describe your company and your position there. I am the CIO of the most important engineering and construction company in Uruguay **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? Our salary and personnel administration system is stored in a postgresql database, the same as other smaller systems. The company requires that these systems are always operational and the data must have high levels of security. **SOLUTION** How did you select this vendor and what were the deciding factors? Nexa was highly recommended by our business partners. Describe the project in detail and walk through their service package. Nexa provides proffesional consulting services and management of our databases. Its services include scripting for different tasks, health monitoring, replication and backup configuration, creation of new environments, and migration processes. Their strengths are their proactive attitude and ability to recommend improvements to the process. How many resources from the vendor's team worked with you, and what were their positions? We have a stable team of professionals assigned to assist us, but on specific occasions and for certain tasks the team is reinforced with other specialists. **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? Thanks to the assistance of Nexa we were able to obtain high availability of our databases. In addition, they generated scripts that improved query times. How effective was the workflow between your team and theirs? They use an efficient ticket system, which results in short response times for our requirements What did you find most impressive or unique about this company? They are meticulous and responsible. They properly plan tasks and carry them out methodically. Are there any areas for improvement or something they could have done differently? We didn't find any --- #### Vulnerability Assessment & Ethical Hacking for E-Invoice Co **The Project** - Services: Cybersecurity - Project size: Less than $10,000 - Project length: September 2022 **Project Summary**: Nexa was hired by an electronic invoicing software company for vulnerability assessment and ethical hacking services. They were tasked with delivering a report with their findings and recommendations. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 5.0 - Cost: 5.0 - Willing to Refer: 5.0 **The Reviewer** Information Security Manager, Uruware - Industry: Other industries - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Nov 18, 2022 **Feedback Summary**: Nexa had a very effective workflow throughout the engagement. In addition, they were easy to work with and responsive to the client's concerns and queries. They conducted automated scans and manual testing, which the client highly appreciated.  ""The report was very clear to understand, and the findings were very well presented."" **BACKGROUND** Please describe your company and your position there. Company: Electronic invoicing software solution company My position: Information Security Manager **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? Vulnerability Assessment & Ethical Hacking **SOLUTION** How did you select this vendor and what were the deciding factors? We selected Nexa for its trajectory in the field of cybersecurity, for its experience in the industry and the technical capabilities of the work team. Describe the project in detail and walk through the stages of the project. Vulnerability assessment and ethical hacking for a new software developed by the company. We began with a kick-off meeting, then we agreed the scope of the assessments and Nexa began with the tasks. At the end of the assessments, Nexa sent us a report with findings and recommendations and we held a final meeting to discuss the report. How many resources from the vendor's team worked with you, and what were their positions? We worked with the CTO, the Customer Success Manager, and 2 members of Nexa´s ethical hacking team. **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? Confidential. How effective was the workflow between your team and theirs? Very effective workflow. It was very easy to work with Nexa´s team. Answered all of our questions and easy to get in touch with. What did you find most impressive or unique about this company? We like the work methodology they use, not only automated scans but a lot of manual testing, very personalized. The report was very clear to understand, and the findings were very well presented. Are there any areas for improvement or something they could have done differently? Not identified. --- #### Web App Penetration Testing for Software Development Firm **The Project** - Services: Cybersecurity - Project size: Less than $10,000 - Project length: Sep. - Oct. 2022 **Project Summary**: Nexa executed penetration testing for a software development firm's web app. They performed a web app security audit, identified potential infrastructure risks, and provided a list of security recommendations. **Review Rating**: 5.0 - Quality: 5.0 - Schedule: 4.0 - Cost: 4.5 - Willing to Refer: 4.5 **The Reviewer** CTO & Co-Founder, Software Development Firm - Industry: Other industries - Client size: 11-50 Employees - Review Type: Online Review - Verified **The Review** — Oct 13, 2022 **Feedback Summary**: Nexa identified several risks and provided suggestions on how to fix them. Their team was thorough and took the time to share cybersecurity best practices with the client. They also delivered on time, constantly updated the client throughout the process, and provided detailed reports. ""They kept us updated as they went through each round of testing, and their reports were easy to understand."" **BACKGROUND** Please describe your company and your position there. CTO and Co-Founder of Custom Software Development company **OPPORTUNITY / CHALLENGE** For what projects/services did your company hire Nexa? We were looking for an external cybersecurity company to perform a web application pentest on a new web platform. **SOLUTION** How did you select this vendor and what were the deciding factors? We have worked with them on a past project for a common client. Describe the project in detail and walk through the stages of the project. They performed a thorough security audit of the website , identifying potential risks in the infrastructure. They carried out penetration testing and ran a complete scan for vulnerabilities. After they finished, they delivered a report on all of our risks and provided a list of security recommendation How many resources from the vendor's team worked with you, and what were their positions? Practice lead Technical lead Ethical hacker **RESULTS & FEEDBACK** Can you share any outcomes from the project that demonstrate progress or success? They were able to identify many risks. Not only were they thorough, but they also took the time to teach us additional cybersecurity best practices. How effective was the workflow between your team and theirs? They kept us updated as they went through each round of testing, and their reports were easy to understand. What did you find most impressive or unique about this company? They where effective and delivered on time. Are there any areas for improvement or something they could have done differently? They did some testing that was out of the scope --- ## Portfolio & Awards ### Clutch Awards - [Clutch Award Badge](https://shareables-prod-static.clutch.co/badges/top_clutch.co_penetration_testing_2026.svg) - [Clutch Award Badge](https://shareables-prod-static.clutch.co/badges/top_clutch.co_cybersecurity_company_uruguay_2026.svg) - [Clutch Award Badge](https://shareables-prod-static.clutch.co/badges/top_clutch.co_managed_service_provider_uruguay_2026.svg) - [Clutch Award Badge](https://shareables-prod-static.clutch.co/badges/top_clutch.co_cloud_consulting_company_uruguay_2026.svg) ### Industry Recognitions - ISO/IEC 27001:2022 - #3 Great Place to Work Under 150 ## Packages ### Cybersecurity Packages To stop a hacker you have to think and act like one. Once we find vulnerabilities we create a detailed report with their description, steps to reproduce them and a classification based both on industry-standards (CVSS) and our understanding of your business. | Feature | Small ($11,500/total) | Medium ($17,250/total) | Large ($34,500/total) | |---------|---------|---------|---------| | Forms | Up to 10 | Between 11 and 30 | Less than 50 | | User roles | Up to 2 | Between 3 and 5 | Less than 10 | | Number of web apps | 1 | 2 | Less than 5 | | Vulnerability audit report | ✓ | ✓ | ✓ | | Step by step intrusion video | — | ✓ | ✓ | | Number of remediation revisions | 0 | 0 | 1 | --- ## Verification Clutch verification provides an additional layer of data to help you make the right purchasing decision of business services. - Verified Client Reviews: 34 - Overall Review Rating: 4.8 Last Updated: 2026-07-03T09:55:03Z ### Business Entity - Business Entity Name: SIFIYE Sociedad Anonima - Jurisdiction of Formation: Uruguay - Date of Formation: May 5, 2015 - Status: Active - Last Updated: December 14, 2024 - ID: 217609640019 ### Credit Report Results - International Credit Risk Assessment: Moderate Risk - Source: Creditsafe - Last Updated: December 24, 2024 ## Locations (3) ### Montevideo, Uruguay (Headquarters) - Jaime Zudáñez 2721 - Montevideo 11300 - Uruguay - 21 - 30 employees - Phone: +598 99 020 854 ### Buenos Aires, Argentina - Colegiales - Buenos Aires C1426DVI - Argentina - 2 - 5 employees - Phone: +54 911 4435 1831 ### La Reina, Chile - La Reina - La Reina 7870351 - Chile - 2 - 5 employees - Phone: +56 9 5117 6681 ## Connections - MATIAS PÁRAMOS (BLinnova) - Fernando Vignoli (Correo Uruguayo) ## Contact Nexa [Send a message](https://clutch.co/profile/nexa-0-0) ### Connect on Social - [LinkedIn](https://www.linkedin.com/company/nexa-it/) - [Instagram](https://instagram.com/nexait)