Raxis

BACKGROUND

Please describe your company and your position there.

I am the director of operations for an industrial sales company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Raxis?

Raxis performed an external network penetration test to help us ensure our website was secure and that other systems were not accessible unless on our internal network.

SOLUTION

How did you select this vendor and what were the deciding factors?

We compared their offerings to other vendors and were pleased with the interview we had with them.

Describe the project in detail and walk through the stages of the project.

We have a small external presence. Raxis helped us set the scope to check systems that we thought were inaccessible externally so they could verify that as well as checking our external sites. The process was very clear, and we received daily updates during testing. The report was delivered quickly, and the debriefing was very helpful to be sure everything was clear so we could get started on rememdiations.

How many resources from the vendor's team worked with you, and what were their positions?

3- sales, a project manager, and a penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We remediated the issues Raxis found and have a better understanding of our network and vulnerabilities that we hadn't expected.

How effective was the workflow between your team and theirs?

Very friendly and easy. All steps of the process were very clear, and we always knew how to reach out to receive a quick answer if we had questions.

What did you find most impressive or unique about this company?

To be honest, it was not a great feeling to invite hackers to try to break into our networks, but from the start, Raxis made us comfortable and provided updates so that we didn't feel in the dark or worried. We couldn't ask for a better team to have the skills of hackers and the professionalism of people who really want to help their customers be as secure as possible.

Are there any areas for improvement or something they could have done differently?

none

BACKGROUND

Please describe your company and your position there.

I am Managing Director of our Predictive Analytics Software and Services business, Clyde Analytics.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Raxis?

Clyde works with insurance companies of all sizes. As we moved up to larger companies, their requirements for IT Security procedures went up exponentially. We hired Raxis to help rewrite our IT Security Manual to get us where we needed to be, without adding unnecessary components.

SOLUTION

How did you select this vendor and what were the deciding factors?

We received recommendations for three potential IT Services providers from our contacts at partners and customers in the Insurance industry. We interviewed all 3, had them deliver a pitch proposal virtually, and then scored each candidate based on expertise, relevance, fit, and cost.

Describe the project in detail and walk through the stages of the project.

The project was made up of 3 main components:

1. review our existing IT procedures, as well as understand our business,
2. review the needs of our customers, including reviewing customer requirements documentation, as well as interviewing several of them, and
3. developing a revised manual, bringing together 1 and 2 that will not only serve our immediate client needs but be relevant well into the future.

How many resources from the vendor's team worked with you, and what were their positions?

We had 4 Raxis staff working on the project,

• COO
• Customer Success contact
• two content experts, manager level.

All team members were professionally impressive, credible, and dependable.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The IT Security Manual that was produced was immediately put into action and was sufficient to meet all of our customer requirements. We still use it today.

How effective was the workflow between your team and theirs?

Everything was completed on time, we coordinated our timelines and touchpoints into a work plan from the beginning and Raxis was disciplined to stick to the plan.

What did you find most impressive or unique about this company?

I appreciated Raxis' ability to have a well-established project approach but not be cookie cutter in what they delivered. Raxis worked hard to really understand our business and needs, which was reflected in the outcome. Raxis took their time, cared about who we were and what we needed, they didn't just rush through it in order for them to move on to the next project.

Are there any areas for improvement or something they could have done differently?

None. It went smoothly and the outcomes were what was needed and planned.

BACKGROUND

Introduce your business and what you do there.

I’m the CISO for our company, which is one of the world’s largest background screening companies. We provide pre-employment background screening services for businesses all over the world.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Raxis?

We hired Raxis for their auditing services, vulnerability assessments, security analysis, and penetration testing services.

SOLUTION

What was the scope of their involvement?

Our company has leveraged Raxis for several services over the years, including penetration testing and security assessments. They provide both on- and offsite support; we’ve leveraged them in both capacities over several engagements. 

What is the team composition?

We’ve had different resources assigned to every engagement we’ve had. Raxis has picked resources based on their expertise to accommodate our project requirements. 

How did you come to work with Raxis?

Our team conducted a typical discovery process; we put out a statement of work (SoW) and Raxis responded with their proposal. We reviewed their proposal, modified the SoW, and returned it to Raxis. When all parties signed off on the modified SoW, we began the engagement.

How much have you invested with them?

We’ve spent around $100,000–$175,000 on their services over the years.

What is the status of this engagement?

We started working with Raxis in January 2015, and our most recent project with them has ended in December 2021. The relationship is ongoing. 

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

Our primary success metric is their turnaround time. We leverage Raxis for high-profile and immediate penetration tests, so we often ask them to deliver within a certain number of weeks. In every engagement, Raxis has always met or exceeded our requirements. 

Apart from turnaround time, we check whether or not Raxis has addressed every aspect of the SoW that we’ve defined. Our team monitors and ensures that our objectives are met in terms of the metrics we’ve set. 

How did Raxis perform from a project management standpoint?

Raxis’ project management is good — they’ve met deadlines and budgets without fail. We typically communicate with them via email and telephone. Our work with Raxis has been point-focused, and there hasn’t been any cross-functional project management required. Their resources may occasionally come to us with questions for clarification or additional data, but we don’t often need to directly manage our engagements with them. 

What did you find most impressive about them?

I consider their focus — specifically in terms of penetration testing — to be an incredible strength of theirs. Raxis’ resources and methodologies are built around testing, security, and all other aspects associated with these things. Their members are skilled, extremely passionate, and dedicated to their work. 

Other general-purpose cybersecurity companies have resources that have a broad skill set that may include non-testing components. By contrast, Raxis focuses on penetration tests, and we engage them because we need such tests to be done well and quickly. 

Are there any areas they could improve?

No, there aren’t any. We haven’t had any disappointing experiences with Raxis. 

Do you have any advice for potential customers?

Raxis has much expertise in terms of penetration testing and how to conduct such tests, so let them help you define the scope of the tests. If you’re making your scope too small, Raxis will tell you what to do to get better results. Overall, they aim to provide the best results possible, but if you tell them how to do their work, you’re not going to get such results. 

BACKGROUND

Please describe your company and position.

I am the Senior Security Analyst of a logistics company.

Describe what your company does in a single sentence.

Shipping, warehousing and logistics 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Raxis to accomplish?

• Web App PenTest of new application

SOLUTION

How did you find Raxis?

Other

Why did you select Raxis over others?

• Pricing fit our budget
• Good value for cost
• Have used them in the past

How many teammates from Raxis were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We were releasing an new web application and wanted to have it fully tested for any known security vulnerabilities prior to going live. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Testing the new application for vulnerabilities and then if found we wanted them to exploit the system as if it were a malicious user. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was excellent.  They let us know when the test began and ended each day. The report was delivered on time and easy to read. 

What was your primary form of communication with Raxis?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They took on a challenging web application.  The price was in line with what we were wanting to pay. 

Are there any areas for improvement or something Raxis could have done differently?

Raxis did an excellent job on fully testing this application.  We were pleased with their communication and performance.  

BACKGROUND

Please describe your company and position.

I am the Director of Cybersecurity and Data Privacy of a church

Describe what your company does in a single sentence.

Our mission is to lead people to become fully devoted followers of Christ.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Raxis to accomplish?

• Vulnerability Assessment

SOLUTION

How did you find Raxis?

Referral

Why did you select Raxis over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from Raxis were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• We asked Raxis to evaluate key systems that are high priority. 
• Raxis delivered a report of their findings and recommendations for remediation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Raxis helped identify areas for improvement.
• They were able to improve our security posture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• The project management by Raxis was superb. 
• They were very responsive and professional. 
• When clarification was needed, Raxis responded quickly and with courtesy. 
• I've been very impressed with the relationship that we've created with Raxis.

What was your primary form of communication with Raxis?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Raxis provides a high level of professionalism and eagerness to ensure expectations are communicated and met.

Are there any areas for improvement or something Raxis could have done differently?

While we needed to check back in with each other many times while deliberating over the contract, Raxis was always available and willing to hear our concerns. I've never felt like they lost interest in meeting all of my expectations.

BACKGROUND

Please describe your company and your position there.

I work for a company that specializes in the protection and condition monitoring of critical industrial assets.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Raxis?

Standards and non-standards based cyber security assessments and penetration testing.

SOLUTION

How did you select this vendor and what were the deciding factors?

I selected this vendor based on references and verbal interviews. For the first project deciding factors were there ability to articulate their methodology and experience. Follow up engagement were decided by their demonstrated professionalism and capabilities.

Describe the project in detail and walk through the stages of the project.

Numerous multi day internal security assessment and penetration testing. I scoped the job with Raxis sales team, their project manager gave me detailed forms to fill out and introduced me to the pentester on a kick off call. They sent a device that I plugged into the network at one office, and halfway through the test, I moved it to another site so they could test a segmented network there. The pentester sent daily updates, and I received the final report in a week. It was well detailed. They offered a debrief call, but I didn't need it.

How many resources from the vendor's team worked with you, and what were their positions?

Sales representative, project manager, and security engineer.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Raxis supplied a very detailed, well written, intuitive report that included quantified and prioritized actionable information. Thanks to the insights provided by this report we were able to take the appropriate actions to mitigate risks in the most efficient way possible.

How effective was the workflow between your team and theirs?

Very effective. The Raxis team was very accessible and responsive.

What did you find most impressive or unique about this company?

Well executed process. We appreciated the translation and prioritization of complex topics into understandable and actionable tasks.

Are there any areas for improvement or something they could have done differently?

None.

BACKGROUND

Please describe your company and your position there.

We are a spam filtering company and I am the manager of all our internal and external systems.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Raxis?

External penetration test for our company.

SOLUTION

How did you select this vendor and what were the deciding factors?

Word of mouth recommendation and after talking with them, they were very professional and you could tell they knew what they were doing.

Describe the project in detail and walk through the stages of the project.

After reviewing our configuration, we did an external penetration test of our data centers and corporate office. After they performed the test, they debriefed with us on the findings with a full detailed report and recommended remediations for all findings.

How many resources from the vendor's team worked with you, and what were their positions?

Three - sales person, project manager, penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They discovered numerous vulnerabilities, but one critical one that gave them internal access to our network. They took the time to walk us through how they gained access and how to remediate the issue to prevent future attacks.

How effective was the workflow between your team and theirs?

Highly effective. They were great at communicating throughout the process.

What did you find most impressive or unique about this company?

They had a high level of professionalism and knowledge about cybersecurity.

Are there any areas for improvement or something they could have done differently?

No.

BACKGROUND

Please describe your company and your position there.

Sentibox performs outsourced IT support that focuses on security in IT. I am a Systems Engineer and support various customers. I also work with our management team to setup new systems & other larger initiatives.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Raxis?

Raxis is Sentibox' penetration testing partner. We recommend that our customers perform annual penetration tests through Raxis, and they provide the reports upon completion so that we can remediate the issues and discuss larger gaps that may lead to Raxis' findings.

SOLUTION

How did you select this vendor and what were the deciding factors?

Raxis has fair pricing for these services. We found companies with lower prices, but they did not give us confidence that they would be thorough.

Describe the project in detail and walk through the stages of the project.

Raxis' performed internal and external network penetration tests for several of our customers. Our team was involved to provide access to the network and to scope the testing at the start of the engagement. Raxis updated us daily with findings and contacted us a few times with issues they thought we should take a look at more quickly. We received the full report in less than a week after the completion of the test.

It was very detailed, explaining each vulnerability in detail including how to recreate the attack and proof of concept screenshots. Remediation advice was also listed on the report, and Raxis had a debriefing call with our team and our customer so we could ask questions. They were very easy to work with.

How many resources from the vendor's team worked with you, and what were their positions?

We worked directly with two resources for each test: a project manager and a penetration tester. We had different penetration testers for different tests.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Each time we received a Raxis penetration test report, we used it as a to do list of items to fix. We also used a report for one customer to start conversations about budgeting to replace an old system with a new one that would be easier to keep up to date and secure. We eventually made the change after several discussions that included the Raxis report, and our customer was very happy with the results.

How effective was the workflow between your team and theirs?

It was extremely easy. The sent us scoping questionnaires before calls so we knew what they needed to know. They were available by phone, but we didn't really need to use that because they sent daily updates. The project manager was on top of things and usually mentioned things before we thought to bring them up.

What did you find most impressive or unique about this company?

We are impressed with the high-quality report and the personal service.

Are there any areas for improvement or something they could have done differently?

Not that I can think of.