ScienceSoft

BACKGROUND

Please describe your company and your position there.

I am the Director of Technology at Ghostlab, a company that makes software enabling people to use cryptocurrency as if it was fiat currency.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire ScienceSoft?

Gray-box security audit & penetration test.

What were your goals for this project?

Identify any security holes in our system and remediate them.

SOLUTION

How did you select ScienceSoft?

We searched online for a list of the most reputable pentest firms and then selected ScienceSoft from a shortlist of 5 candidates.

Describe the project in detail.

Penetration test - they tried to break into all of our services and documented any successful attepts.

What was the team composition?

2 pentesters and a project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We received a list of 9 identified security vulnerabilities along with mitigation instructions & ScienceSoft performed a retest to confirm our successful remediation.

How effective was the workflow between your team and theirs?

Very happy with our communication.

What did you find most impressive about this company?

They provide high quality at a very reasonable cost.

Are there any areas for improvement?

N/a

BACKGROUND

Please describe your company and your position there.

I’m the CTO of Appcast, a job advertising solution based on a pay-per-applicant model.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire ScienceSoft?

We hired ScienceSoft to perform penetration testing on our platform.

What were your goals for this project?

We wanted to establish our current security status, define vulnerabilities, fix them, and then test them again to ensure they were resolved.

SOLUTION

How did you select this vendor?

We read feedback from other companies that had used ScienceSoft for penetration testing.  

Describe the project in detail.

Once we selected this vendor, we had a kick-off meeting with them. They explained their different testing methodologies and provided us with details of how they’d approach our situation. Their test identified a few security vulnerabilities. They assigned a severity to each, provided steps to fix the issues, and explained how they could impact us.

What was the team composition?

They assigned us a senior security engineer. We communicated directly with this resource. 

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After we fixed these vulnerabilities in-house, ScienceSoft did additional testing to confirm they no longer presented a risk to us. 

How effective was the workflow between your team and theirs?

We communicated via email. ScienceSoft was highly responsive and helpful.

What did you find most impressive about this company?

They were flexible with us, worked quickly, and provided good feedback.

Are there any areas for improvement?

No, not that I saw.