Secragon

BACKGROUND

Please describe your company and position.

I am the Security Engineer of Redpanda Data, Inc.

Describe what your company does in a single sentence.

Agentic Dataplane and Streaming

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Secragon to accomplish?

• To identify, exploit, and assess vulnerabilities in Redpanda’s Serverless and Connect environments, focusing on tenant isolation, Kubernetes security, and authorization mechanisms, and to provide actionable remediation guidance with a verified retest.

SOLUTION

How did you find Secragon?

Referral

Why did you select Secragon over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Secragon were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We were delivered a complete Pentesting report, followed by Retest report and Attestation Letter to be used for compliance purposes.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The engagement provided Redpanda with a verified understanding of its external and semi-internal security posture, helping the company significantly strengthen controls across its managed and serverless data streaming environments.

Comprehensive risk mitigation plan integrated into Redpanda’s DevSecOps pipeline

Improved tenant isolation, Kubernetes security policies, and cross-cluster segmentation controls

Zero service disruptions during the test period

Engagement completed on time and within the agreed budget

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project deliverables were delivered on time, and they provided proactive support throughout the project.

What was your primary form of communication with Secragon?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Communication was done in a proffesional manner.
• All proposed remediations were accepted by our technical team.
• Clear and to-the-point reporting.

Are there any areas for improvement or something Secragon could have done differently?

Improve the marketing - its a boutique service provider and hard to find such proffesional services.

BACKGROUND

Introduce your business and what you do there.

I'm the COO at Electives, Inc. We are a learning platform that offers live, expert-led training and AI simulations for employees. Our platform covers topics such as leadership, business skills, and wellbeing, aiming to make learning engaging for staff and easy for HR to manage.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Secragon?

We needed to ensure the security of our main web application, which is central to our business. To address this, we sought a partner to conduct a thorough manual penetration test and provide actionable recommendations for remediation.

SOLUTION

What was the scope of their involvement?

Secragon performed a manual penetration test focused on our web application. Their deliverables included a detailed written report outlining discovered vulnerabilities and recommendations for addressing them, as well as a summary report for sharing with clients and stakeholders. They also conducted a retest after we addressed the vulnerabilities.

What is the team composition?

Between 2–5 team members from Secragon were assigned to our project.

How did you come to work with Secragon?

We found Secragon through a referral. We chose them because of their value for cost, company values, and quality.

What is the status of this engagement?

We worked together in October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The engagement resulted in the identification of vulnerabilities in our platform, along with comprehensive written reports and guidance on remediation. The retest confirmed that the vulnerabilities had been properly addressed, meeting our security objectives for the project.

How did Secragon perform from a project management standpoint?

Secragon delivered everything on time and demonstrated excellent project management throughout the engagement. Their communication via virtual meetings, emails, and messages was clear and effective, and the entire process was handled professionally.

What did you find most impressive about them?

I was particularly impressed by their creativity and technical expertise in penetration testing. They stayed up to date with the latest attack vectors, including prompt poisoning and other modern threats, in addition to covering the well-known vulnerabilities.

Are there any areas they could improve?

I cannot think of anything they could have done better. The team did a fantastic job throughout the project.