Qualysec Technologies Pvt Ltd

BACKGROUND

Please describe your company and position.

I am a department lead at Oivi

Describe what your company does in a single sentence.

Oivi is a health-tech company (founded ~2017, Norway) that builds: A portable retinal (fundus) camera A cloud-based diagnostic platform AI-assisted workflows for eye disease detection, especially diabetic retinopathy

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• Penetration and VPAT testing of Oivi Cloud backend
• Penetration and VPAT testing of Oivi Web application
• Penetration and VPAT testing of Oivi Desktop application

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Organised approach

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Oivi engaged Qualysec to perform penetration testing on its software ecosystem, including the desktop application used to control the camera and capture images, the web application that allows users to log in and access patient information, and the backend services that support both the desktop and web applications.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Qualysec conducted thorough penetration and vulnerability testing of Oivi’s software and generated detailed reports for each component. The findings were categorized based on severity levels ranging from low to critical, with an overall risk rating assigned to each observation. Each issue was comprehensively documented, including a summary, detailed description, steps to reproduce, and recommended mitigation measures. This structured approach enabled Oivi to efficiently identify, prioritize, and remediate security vulnerabilities.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team was highly professional, with a well-organized approach throughout the engagement. They carefully listened to our requirements, clearly explained their capabilities and scope of work, and provided templates and sample test reports for better understanding. They were consistently punctual and remained prompt and responsive at every stage of the project.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive aspect of Qualysec was their professionalism, structured approach to the entire process, and deep expertise. These qualities, when combined, distinguish them from the limited number of companies that offer similar services.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

Oivi is highly satisfied with the services provided by Qualysec, as the engagement fully met its objective of identifying vulnerabilities within the software so they could be effectively remediated. The reports delivered by Qualysec were comprehensive, and several findings represented entirely new discoveries that would have been difficult to identify through internal assessments alone without specialized expertise.

BACKGROUND

Please describe your company and position.

I am the Vice Director of MBF.eCO Department of FPT IS Company Ltd

Describe what your company does in a single sentence.

FPT IS Company Limited is a core subsidiary of FPT Corporation - global IT Company, specializing in providing leading digital transformation, green transformation, and Made by FPT solutions, products, and services in Vietnam and the region.

FPT IS focuses on Medium to Large enterprise in several key sectors, including public sector, finance and banking, healthcare, manufacturing, enterprise, and cybersecurity.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The goal of this project was to identify security vulnerabilities in FPT’s digital assets and help strengthen their overall security posture, ensuring their systems and applications are better protected from potential cyber threats.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Referral

Why did you select Qualysec Technologies Pvt Ltd over others?

• High ratings
• Good value for cost

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Qualysec provides professional VAPT services for number of our web applications and mobile applications.

• Scope of the engagement and timeline
• Daily activities report
• Summary of critical and high vulnerabilities
• Risk rating overview
• Key recommendations
• Review after issed fixed, LOA / Certificates

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Reduction in Security Vulnerabilities - 100% Critical/High vulnerabilities remediated after retest
2. Achieved 100% compliance with required vulnerability management controls

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Well managed and deliver the project.

Patient with the different in culture & styles of working / internal process

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Strong focus on offensive cybersecurity services.

Professional services and take care of the details in the project.

Qualysec Technologies Pvt Ltd delivered a practical and comprehensive security report with explanations and support.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

Different timezone leads to meeting time typically around 12 noon our time

BACKGROUND

Please describe your company and position.

I am the Director of Unvired Inc.

Describe what your company does in a single sentence.

Unvired offers AI-powered digital solutions for asset management, inventory & warehouse management, safe work permit, and custom mobile & web apps for enterprise customers.  

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The primary objective of this project was to ensure the security of Unvired’s web application and APIs.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Unvired engaged Qualysec to perform a comprehensive Vulnerability Assessment and Penetration Testing (VAPT) of its Web Applications and APIs to ensure the highest level of security and resilience of its solutions. The engagement included automated and manual testing to identify potential vulnerabilities, assess associated risks, and provide detailed remediation recommendations. As part of the deliverables, Qualysec submitted detailed assessment and penetration testing reports, verified the closure of identified issues through retesting, and issued security compliance certificates confirming that Unvired’s Web Applications and APIs meet the required security standards.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project resulted in significant improvements to Unvired’s security posture, with all identified vulnerabilities successfully remediated and verified through Qualysec’s retesting process. No critical or high-severity issues remained post-assessment, demonstrating strong progress in securing Unvired’s Web Applications and APIs.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Qualysec managed the project efficiently, delivering all assessments and certificates on time while promptly addressing Unvired’s needs and feedback throughout the engagement.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We found Qualysec’s flexibility and responsiveness most impressive, along with their professional and skilled team.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

At this time, we don’t have any specific areas for improvement to comment on.

BACKGROUND

Please describe your company and position.

I am the Project Manager of Topia Life Sciences

Describe what your company does in a single sentence.

Medical Device Research & Development Company engaged in new product innovation, design and development.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The primary goal of this assessment for Topia Life Science was to achieve FDA compliance, which requires conducting a penetration test.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Cyberesecuirty Testing for Mobile App in Andorid and iOS, Embedded Device and Web dashboard in digital ocean cloud. Testing and remidation to comply with IEC 62304 software development guidlines and HIPAA, GDPR.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Penetration Testing Report with zero critical and high level vulnerablities after remidiation implemented and retesting done.

Software Documents as per IEC 62304 guidlines 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes they were quite sincere and efficient in terms of project delivery.

They provided support in resolving the issues at priority.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Efficient and approachable team with great deal of transparency and understanding in resolving matters of concern.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

Not in our case

BACKGROUND

Please describe your company and position.

 I am the Co-Founder of an AI-powered assistant provider.

Describe what your company does in a single sentence.

We're an AI-powered conversational assistant that effortlessly handles calls and appointment booking.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The goal of this project is to identify and address security vulnerabilities in our web application and cloud environment to enhance protection and ensure compliance with HIPAA regulations.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• High ratings
• Pricing fit our budget
• Company values aligned

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

QualySec delivers high quality / detailed reports following penetration tests for our Web Application and Google Cloud environemnt.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

QualySec helped us to identify and remediate vulnerabilities which were identified during their robust penetration tests. From the testing we recieved complrehensive reports with detailed steps to replicate the vulerabilites and to remediate them.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All of the team members at Qualysec Technologies Pvt Ltd responded to our requests and comments rapidly. Their communication was very strong from the beginning and I really appreciated the great work they did!!

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

Virtual Meeting

What did you find most impressive or unique about this company?

The most impressive qualities of this company were their exceptional communication and the robust, detailed reports they generated, and providing thorough guidance on necessary remediations.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

None, they were great!

BACKGROUND

Please describe your company and position.

I am a department head of vTitan Corporation Pvt. Ltd

Describe what your company does in a single sentence.

vTitan is an Indian MedTech company specializing in the design and development of advanced, cost-effective medical devices and equipment.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The primary objective of this engagement was to perform a penetration test on the Accuflow Uro medical device and mobile application for vTitan Corporation. This assessment aimed to ensure compliance with FDA guidelines and verify that the application meets the highest security standards.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The key deliverables of a penetration testing engagement for a medical device like the Accuflow Uroflow system focus on identifying and mitigating potential security vulnerabilities to ensure patient safety and compliance with regulatory standards.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Reduction in Identified Vulnerabilities

Risk Mitigation

Security Control Enhancements

Compliance Achievement

Improved Security 

Incident Response Readiness

User Awareness

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Our experience with the Qualysec was highly positive in terms of project management and delivery.

They maintained an open channel of communication, allowing us to address questions or issues as they arose.

Regular status updates throughout the testing period ensured there were no surprises, and the testing team adhered to the project schedule without delays.

The company was highly responsive to our evolving needs.

Their willingness to offer post-delivery support and guidance was an added bonus.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Documentation,Project support and communication & Flexibility.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

Nil

BACKGROUND

Please describe your company and position.

I am the IT Operations Manager of Tomorrow Land Technology Inc

Describe what your company does in a single sentence.

We are committed to working with clients to address complex issues that surround Identity, Access & Risk Management-AIMS

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The primary objective of this penetration testing engagement for the AIMS web application, owned by Tomorrow Land Technology, is to strengthen its security posture and ensure compliance with SOC 2 certification requirements.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned
• management

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

A penetration test has been conducted for our web application and the retest report, letter of attestation and executive summary was provided upon request.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The penetration testing report submitted by QualySec provided several measurable outcomes that demonstrated progress and success in strengthening our security posture for SOC 2 compliance. Key outcomes included:  

1. Identified and remediated vulnerabilities – The report highlighted critical, high, and medium-risk vulnerabilities, which were promptly addressed by the team to enhance system security.  
2. Compliance readiness – The successful completion of the pen test contributed to our SOC 2 audit readiness, ensuring our security measures align with industry best practices.  
3. Validation of security controls – The assessment verified that existing security controls were effective in mitigating potential threats, improving confidence in our infrastructure.  
4. Improved incident response measures – Insights from the test were used to refine our incident response plan, ensuring faster detection and mitigation of security threats.  
5. Demonstrated due diligence to stakeholders – The finalized report serves as evidence of our commitment to security, strengthening trust with customers, auditors, and partners.  

These measurable outcomes mark a significant step toward achieving full SOC 2 compliance and ensuring a robust security framework.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

QualySec's project management approach was structured, efficient, and aligned with our SOC 2 compliance timeline. They followed a clear testing schedule, ensuring each phase—from initial scoping to final report delivery—was well-coordinated.  

- Timely Delivery – They met key deadlines, providing test results and reports within the agreed-upon timeframe, allowing us to address findings promptly.  
- Responsiveness – Their team was highly responsive, addressing queries quickly and offering clear explanations of vulnerabilities and remediation steps.  
- Adaptability to Needs – They tailored their testing scope based on our requirements and compliance goals, ensuring alignment with SOC 2 standards.  
- Clear Communication – Regular updates and debrief sessions helped maintain transparency, ensuring our team stayed informed throughout the process.  

Overall, their structured project management and proactive communication contributed to a smooth and successful penetration testing engagement.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

Virtual Meeting

What did you find most impressive or unique about this company?

What stood out most about QualySec was their attention to detail and expertise in compliance-driven penetration testing. A few key aspects that were particularly impressive:

Compliance-focused approach – Their deep understanding of SOC 2 requirements ensured that the testing process was aligned with audit expectations, making remediation efforts more effective.
Actionable insights – Instead of just identifying vulnerabilities, they provided clear, prioritized remediation steps, helping our team address issues efficiently.
Fast turnaround time – Their ability to deliver results on schedule without compromising quality showcased their efficiency and reliability.
Proactive communication – They maintained regular check-ins, ensuring we had full visibility into the testing progress and any critical findings.
Customization and flexibility – They adapted their testing methodology to suit our unique security environment rather than applying a one-size-fits-all approach.
Overall, QualySec’s professionalism, technical expertise, and commitment to security best practices made them a standout partner in our SOC 2 compliance journey.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

While QualySec Technologies Pvt Ltd provided a highly professional and efficient penetration testing service, there are a few areas where improvements could enhance the overall experience:

More detailed remediation guidance – While they provided clear vulnerability reports, offering more in-depth remediation recommendations with examples or best practices could help speed up the resolution process.
Real-time progress tracking – A dedicated dashboard or portal to track test progress and findings in real time would improve visibility and reduce the need for follow-ups.
Follow-up testing coordination – Proactively scheduling follow-up testing after remediation to validate fixes could streamline the compliance process.
Broader compliance insights – Providing additional insights on compliance beyond SOC 2, such as ISO 27001 or GDPR, could add value for companies with multiple regulatory requirements.
Overall, these refinements would further enhance their already strong penetration testing and compliance support services.

BACKGROUND

Please describe your company and position.

I am the Group IT Manager of Samena Capital

Describe what your company does in a single sentence.

Finance and Wealth management

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• The goal of this engagement is to fulfill the Penetration test need of Samena Capital. Also, Samena Capital want to ensure their Web application,Network, and Azure Cloud are secure and free from vulnerabilities.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• Pricing fit our budget
• Good value for cost

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We have approached Qualysec for the Penetration testing and they have delivered below services

1. Network Penetration
2. Microsoft Cloud Penetration
3. Website Penetration

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Penetration test has identified and addressed security vulnerabilities in our environment.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

A well-managed project has clear deadlines for each phase. The testing team has delivered all agreed-upon deliverables on schedule, including interim updates or final reports.

Throughout the engagement, the team has communicated clearly and regularly. This includes providing status updates, alerting the client to critical vulnerabilities discovered, and being open to questions and clarifications.

The team have provided clear and concise reporting, broken down by different severity levels of vulnerabilities. The reports have included both technical details (e.g., exploit code, detailed descriptions of findings) and executive summaries to help stakeholders of varying technical backgrounds understand the impact.

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Deliverables

Responsiveness to Client Needs

Transparency and Reporting

Quality Assurance and Post-Test Support

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

need to Include Social media testing if possible

BACKGROUND

Please describe your company and position.

I am the CISO of OneShield

Describe what your company does in a single sentence.

OneShield provides business solutions for P&C insurers and MGAs of all sizes.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

Penetration testing for enterprise products.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

Online Search

Why did you select Qualysec Technologies Pvt Ltd over others?

• Pricing fit our budget
• Good value for cost
• Technical expertise

Describe the scope of work in detail. Please include a summary of key deliverables.

Qualysec was engaged to perform a time-boxed manual security assessment against the target API and web application. This assessment involved a deep automated scan using automated scanning tools to discover common vulnerabilities, as well as manual testing. Manual testing includes validation of all issue types covered under the automated scan as well as checks for problems not typically found by automated scanners such as authentication, authorization and business logic flaws.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Penetration testing was completed and a final report provided for our records. We were engaed for report review and recommendations and completed additional scans upon resolution of findings.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They were very professional and met all timeline requirements. They even expanded scope based on issues that we faced for which they had no obligations to do. Very good team to work with. 

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their professionalism, technical expertise, and willingness to expand scope without extensive costs were impressive.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

For our limited engagement we feel they met and exceeded our expectations. 

BACKGROUND

Please describe your company and position.

I am the Infrastructure Coordinator of TeamWorld inc.

Describe what your company does in a single sentence.

For over 40 years, TeamWorld has been a promotional consultant for businesses of all kinds, helping them find apparel and products that will best represent their brand and corporate identity.

With an emphasis on customer service, we bring an array of solutions and support for all things branded merchandise. From uniform programs to company stores to recognition programs to event services and more, we're dedicated to being industry-leaders at creating and delivering high-quality branded merchandise and workwear.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Qualysec Technologies Pvt Ltd to accomplish?

• Deep Penetration testing to secure 3 web applications from cyber threats.

SOLUTION

How did you find Qualysec Technologies Pvt Ltd?

• Online Search
• Clutch Site

Why did you select Qualysec Technologies Pvt Ltd over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Qualysec Technologies Pvt Ltd were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We needed blackbox testing done on 3 different web applications that we were going live with.  Since these were ecommerce applications we wanted to make sure our platform was as secure as we could to protect our customers and ourselves from any malicious activites.  We wanted to be certified that our applications were secure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We have conducted the penetration testing and provided the report for 3 web applications. Their development team properly fix all the issues and we conduct the retest to ensure all the issues are fixed.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Qualysec always provided updates through every step of our penetration testing and were quick to answer any questions we had.  

What was your primary form of communication with Qualysec Technologies Pvt Ltd?

Email or Messaging App

What did you find most impressive or unique about this company?

I was impressed by the level of detail put into the reporting was very detailed, including what steps were done to produce the issue and what we needed to do to remedy the issue.  Everything was very well detailed and impressive.

Are there any areas for improvement or something Qualysec Technologies Pvt Ltd could have done differently?

Nothing notable, we were very pleased with our results.