ONSEC.io

BACKGROUND

Please describe your company and position.

I am the IT Security Manager of Exadel, Inc.

Describe what your company does in a single sentence.

Exadel is a leading global consulting and engineering company that delivers technology transformation to help customers become digital leaders in their industries.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire ONSEC.io to accomplish?

• We required ONSEC.io's specialized expertise to conduct comprehensive evaluations of our systems, identify potential security vulnerabilities, and detect weaknesses in the corporate system's defenses when exploiting the discovered vulnerabilities.

SOLUTION

How did you find ONSEC.io?

Online Search

Why did you select ONSEC.io over others?

Expertise, hands-on approach, and consistent delivery of high-quality penetration testing services

How many teammates from ONSEC.io were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The project involved comprehensive security assessments, focusing on penetration testing, to evaluate the security posture of Exadel's critical assets and infrastructure. The project encompassed both internal and external network perimeters, web applications, and a number of key infrastructure components, including mission-critical assets and services.

Our collaboration began from the initial Planning stage, where project objectives, scope, critical assets and systems for assessment were identified. Following the Information Gathering phase, where key information was collected on the targeted systems and applications, ONSEC.io experts started working directly on the Vulnerability Assessment and Penetration Testing phases. 

Subsequently we received the report (Reporting phase) with documented findings, including identified vulnerabilities and exploitation techniques. A comprehensive analysis of the security posture was presented, offering detailed recommendations for remediation and enhancements to the systems.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project yielded significant progress by effectively identifying and addressing vulnerabilities and security weaknesses. This proactive approach not only enhanced our security posture but also ensured improved compliance with industry-specific regulations and standards. Furthermore, our ongoing partnership with ONSEC.io, spanning two years, underscores the successful collaboration in managing security risks and maintaining the security of our critical assets.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The workflow between our team and ONSEC.io was highly effective throughout the duration of the project. Their team seamlessly integrated with ours, ensuring clear communication, collaboration, and coordination at every stage. This efficient workflow allowed for timely identification and resolution of security issues.

What was your primary form of communication with ONSEC.io?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What truly impressed us about ONSEC.io was their exceptional expertise in cybersecurity. Their team showcased a profound grasp of current threats and vulnerabilities and conducted highly effective hands-on penetration testing. Their expertise in delivering clear and actionable remediation recommendations was remarkable. 

ONSEC.io's commitment to transparency, combined with their proactive and collaborative approach, made them an invaluable partner in enhancing our security posture. Furthermore, their detailed and well-structured project report added significant value by offering a comprehensive overview of their work.

Are there any areas for improvement or something ONSEC.io could have done differently?

Exadel is highly satisfied with the exceptional quality of ONSEC.io's work. At this juncture, we don't identify any further areas for improvement. Our experience collaborating with their team was exceptionally comfortable throughout all project stages. Any questions or concerns were addressed promptly and comprehensively.

BACKGROUND

Please describe your company and your position there.

I’m the CEO of Evil Martians, a product development consultancy company that works with startups and established businesses while also creating open source-based products & services.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire ONSEC.io?

We are developing many software products of great complexity for a variety of enterprise customers all over the world. Keeping the products secure is one of our greatest values. That’s why we have been collaborating with the Onsec team for many years for providing a third-party penetration testing service.

SOLUTION

How did you select this vendor and what were the deciding factors?

We iterated with several vendors and finally decided that collaboration with Onsec was the most effective and comfortable for us.

Describe the project in detail and walk through the stages of the project.

For a large, ongoing ecommerce product we were responsible for, we had a very specific set of information security requirements, where, among other things, we needed quarterly penetration testing and setting up a WAF. Due to the outstanding quality of the audit conducted, we continued our collaboration, and to this moment, Onsec provided us with audits and pentests in black-box, grey-box, and white-box modes.

How many resources from the vendor's team worked with you, and what were their positions?

Depending on the project size the team encountered from three to six experts. This amount doesn’t include managerial staff, assisting in collaboration.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We were impressed with the level of technical competence of the team and the variety of tests and checks they had to run, showing great skill in the web application security field. The engagement allowed us to ship software quickly with predictable quality and no problems in the production environment.

How effective was the workflow between your team and theirs?

We can evaluate the communication between our technical teams at the highest mark. Many of our team members are placed in different time zones, but Onsec managed to set up a smooth collaboration with them.

What did you find most impressive or unique about this company?

We highly appreciate Onsec's expertise in the cybersecurity area as well as the level of customer service.

Are there any areas for improvement or something they could have done differently?

No.