Secragon

BACKGROUND

I am the Founder & CEO of Oceanbridge Group Inc.

Oceanbridge Group Inc. is an international advisory and technology consulting firm built on one idea: *where trust becomes a foundation.* Our principals bring decades of cross-border experience, applied with competence, integrity and discretion. We combine deep domain knowledge with disciplined use of technology. Our IT consulting covers custom software development, system architecture and cybersecurity, with a focus on secure financial and enterprise applications. We also provide business consulting, covering global strategy and diversification. Our head office is in Panama City, Panama.

OPPORTUNITY / CHALLENGE

• Establish and operate a complete defensive security function to protect confidential client and project information, strengthen resilience, and maintain continuous oversight of cyber risks.
• Assess cybersecurity governance and controls against applicable frameworks, identify gaps, and implement a prioritized remediation program.

SOLUTION

Referral

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned
• Unique cybersecurity products

2-5 Employees

SECRAGON took over the development and ongoing management of our cybersecurity operations, covering network and endpoint protection, security monitoring, threat detection, vulnerability management and external exposure monitoring through SECRAGON Eye. They also strengthened our access controls, secure document management and data protection, and conducted a comprehensive compliance gap assessment against ISO 27001, NIST CSF and GDPR requirements. Remediation is ongoing.

RESULTS & FEEDBACK

Completed a comprehensive gap assessment against ISO/IEC 27001, NIST CSF 2.0 and applicable GDPR requirements, with documented findings and prioritized remediation actions.

Deployed strengthened access controls, secure document collaboration, audit logging and backup/recovery capabilities; completed password audits and began remediation of identified gaps.

• Stronger security posture: Network, endpoint and access controls are now managed under one continuous program.
• Continuous visibility: Security monitoring, threat detection and external exposure monitoring via SECRAGON Eye now run around the clock.
• Reduced risk: all identified vulnerabilities were remediated within 5 days.
• Compliance clarity: A full gap assessment against ISO 27001, NIST CSF and GDPR produced a prioritized remediation roadmap.
• Data protection: Access controls and document management were tightened, covering all users, systems or repositories.

They delivered every milestone on schedule and responded quickly to our questions and security alerts. Their team was always available and acted promptly.

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

• Products and services together: Their own tools, like SECRAGON Eye for external exposure monitoring, work alongside the consulting team.
• Compliance depth: They understood ISO 27001, NIST CSF and GDPR in practice, not just in theory.
• Ongoing partnership: They stayed involved through remediation, not just the assessment.

Nothing significant. SECRAGON exceeded our expectations. If anything, we'd like to continue and expand the engagement.

BACKGROUND

Please describe your company and position.

I am the Chief Digital & Infrastructure Officer of M2M Services Ltd.

Describe what your company does in a single sentence.

Accelerating the mass adoption of smart security through universal and affordable IoT solutions
We create simple, innovative and dependable technology that helps alarm companies bring smart security to every household and business around the world.
M2M Services is a technology company that provides universal communicators, connectivity, and interactive services to a global network of thousands of professional alarm companies.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Secragon to accomplish?

• Conduct coordinated penetration testing of a mobile application (iOS and Android), a production web portal, and associated backend APIs. The objective was to identify vulnerabilities affecting authentication, authorization, and data handling, and provide remediation guidance to reduce exposure.

SOLUTION

How did you find Secragon?

Referral

Why did you select Secragon over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me

Describe the scope of work in detail. Please include a summary of key deliverables.

Comprehensive Web Application and Mobile Appliation PenetrationTest of the M2M Services. 

This engagement simulates real-world cyberattacks in a controlled setting to proactively identify risks, safeguard your data, ensure business continuity, and maintain regulatory compliance.

Testing activities and reporting are aligned with industry-recognized frameworks, including but not limited to OWASP Top 10 (Web Applications), OWASP API Security Top 10, and MITRE ATT&CK techniques.

The approach combines scanning for common vulnerabilities with extensive manual testing using a blend of public tools and proprietary tools and exploits to uncover complex, business-logic, and context-dependent vulnerabilities and attack paths.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Delivered validated proof-of-concept evidence for all findings, along with risk prioritization and remediation guidance, enabling measurable reduction in unauthorized access and backend exposure.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We were very satisfied with their project management. All deliverables were completed on schedule, and the team maintained clear, proactive communication throughout the engagement. They were highly responsive to our needs, quickly addressing questions and adapting to requirements as they arose, which made the entire process smooth and efficient.

What was your primary form of communication with Secragon?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive aspect of the company was their high level of expertise combined with exceptional responsiveness. Their deep technical knowledge was evident throughout the engagement, and they were always quick to respond, clarify findings, and provide practical guidance.

Are there any areas for improvement or something Secragon could have done differently?

no

BACKGROUND

Please describe your company and position.

I am the Security Engineer of Redpanda Data, Inc.

Describe what your company does in a single sentence.

Agentic Dataplane and Streaming

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Secragon to accomplish?

• To identify, exploit, and assess vulnerabilities in Redpanda’s Serverless and Connect environments, focusing on tenant isolation, Kubernetes security, and authorization mechanisms, and to provide actionable remediation guidance with a verified retest.

SOLUTION

How did you find Secragon?

Referral

Why did you select Secragon over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Secragon were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We were delivered a complete Pentesting report, followed by Retest report and Attestation Letter to be used for compliance purposes.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The engagement provided Redpanda with a verified understanding of its external and semi-internal security posture, helping the company significantly strengthen controls across its managed and serverless data streaming environments.

Comprehensive risk mitigation plan integrated into Redpanda’s DevSecOps pipeline

Improved tenant isolation, Kubernetes security policies, and cross-cluster segmentation controls

Zero service disruptions during the test period

Engagement completed on time and within the agreed budget

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project deliverables were delivered on time, and they provided proactive support throughout the project.

What was your primary form of communication with Secragon?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Communication was done in a proffesional manner.
• All proposed remediations were accepted by our technical team.
• Clear and to-the-point reporting.

Are there any areas for improvement or something Secragon could have done differently?

Improve the marketing - its a boutique service provider and hard to find such proffesional services.

BACKGROUND

Introduce your business and what you do there.

I'm the COO at Electives, Inc. We are a learning platform that offers live, expert-led training and AI simulations for employees. Our platform covers topics such as leadership, business skills, and wellbeing, aiming to make learning engaging for staff and easy for HR to manage.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Secragon?

We needed to ensure the security of our main web application, which is central to our business. To address this, we sought a partner to conduct a thorough manual penetration test and provide actionable recommendations for remediation.

SOLUTION

What was the scope of their involvement?

Secragon performed a manual penetration test focused on our web application. Their deliverables included a detailed written report outlining discovered vulnerabilities and recommendations for addressing them, as well as a summary report for sharing with clients and stakeholders. They also conducted a retest after we addressed the vulnerabilities.

What is the team composition?

Between 2–5 team members from Secragon were assigned to our project.

How did you come to work with Secragon?

We found Secragon through a referral. We chose them because of their value for cost, company values, and quality.

What is the status of this engagement?

We worked together in October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The engagement resulted in the identification of vulnerabilities in our platform, along with comprehensive written reports and guidance on remediation. The retest confirmed that the vulnerabilities had been properly addressed, meeting our security objectives for the project.

How did Secragon perform from a project management standpoint?

Secragon delivered everything on time and demonstrated excellent project management throughout the engagement. Their communication via virtual meetings, emails, and messages was clear and effective, and the entire process was handled professionally.

What did you find most impressive about them?

I was particularly impressed by their creativity and technical expertise in penetration testing. They stayed up to date with the latest attack vectors, including prompt poisoning and other modern threats, in addition to covering the well-known vulnerabilities.

Are there any areas they could improve?

I cannot think of anything they could have done better. The team did a fantastic job throughout the project.

BACKGROUND

Please describe your company and position.

 I am the Information Security Officer (ISO) of an information technology company 

Describe what your company does in a single sentence.

IT company 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Secragon to accomplish?

• 1.Identify potential security vulnerabilities in the applications. 2.Evaluate the security posture against common attack vectors. 3.Provide actionable recommendations for addressing identified vulnerabilities. 4.Support regulatory, compliance, and internal security assurance requirements.

SOLUTION

How did you find Secragon?

• Online Search
• Referral

Why did you select Secragon over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

Mobile application

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project improved the overall security posture of the mobile applications. All findings were remediated and independently verified, reducing the risk of unauthorized access and data exposure and improving compliance and security readiness.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Secragon delivered a world-class mobile pentest for us. Their experts didn’t just find vulnerabilities; they provided deep insights into our API security and local storage encryption. Communication was seamless, the turnaround was impressive, and the remediation guidance was incredibly helpful. They are officially our go-to for mobile security

What was your primary form of communication with Secragon?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

While most companies look for basic OWASP vulnerabilities, Secragon is known for its proficiency in reverse engineering. They don’t just look at the code; they actively bypass complex protections like SSL Pinning, Root/Jailbreak detection, and anti-tampering mechanisms. This ensures they see the app exactly how a sophisticated hacker would—unfiltered.

Are there any areas for improvement or something Secragon could have done differently?

no