Securing

BACKGROUND

Please describe your company and position.

I am the Offensive Security Manager

Describe what your company does in a single sentence.

Our company is a leading international tobacco company working to deliver a smoke-free future and evolving its portfolio for the long term to include products outside of the tobacco and nicotine sector. Since 2008, PMI has invested more than USD 10.5 billion to develop, scientifically substantiate and commercialize innovative smoke-free products for adults who would otherwise continue to smoke, with the goal of completely ending the sale of cigarettes. 

In November 2022, PMI acquired Swedish Match – a leader in oral nicotine delivery – creating a global smoke-free champion led by the companies’ IQOS and ZYN brands. As of September 30, 2023, PMI's smoke-free products were available for sale in 82 markets, and PMI estimates that approximately 19.7 million adults around the world had already switched to IQOS and stopped smoking. 

Smoke-free products account for approximately 36.2% of PMI’s total third-quarter 2023 net revenues. With a strong foundation and significant expertise in life sciences, PMI announced in February 2021 its ambition to expand into wellness and healthcare areas and, through its Vectura Fertin Pharma business, aims to enhance life through the delivery of seamless health experiences. For more information, please visit www.pmi.com and www.pmiscience.com.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Enhance application security posture with offensive security services

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Securing were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work encompassed penetration testing, application security assessment, and threat modeling consulting for web applications, mobile applications, and cloud infrastructure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A high-quality report was delivered on time, resulting in high satisfaction from our stakeholders.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Deliveries were punctual, with rapid responses and exceptional flexibility in accommodating changes to the project timeline.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

In terms of availability, their small team can rival larger companies with significantly greater resources.

Are there any areas for improvement or something Securing could have done differently?

Nothing comes to mind at the moment.

BACKGROUND

Please describe your company and position.

I am the IT Security Expert of a financial services company.

Describe what your company does in a single sentence.

Selling financial services - loans.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Pentesting Insurance Web Application

SOLUTION

How did you find Securing?

Already knew the company.

Why did you select Securing over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Pentest of a critical internet facing application. The assessment aimed to ensure the overall security, integrity and confidentiality of the application. 
• Deliverables: detailed report of identified vulnerabilities, misconfigurations, errors with risk levels, and proposed remediation. 

Challenges: 

short time frame to deliver. 

• Securing accommodated my request in time. 

What is the most impressive is that Securing performed the pentest very well during the Christmas holiday season.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Identified critical and high severity vulnerabilities 
• worked under pressure, especially that we were between Christmas and NYE.
• provided clear pentest report
• provided the opportunity to meet and discuss the vulnerabilities
• showed due diligence and due care.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Securing exhibited commendable project management throughout the engagement. Their responsiveness was noteworthy, promptly addressing inquiries and accommodating needs in a timely manner. 
Importantly, the team consistently delivered on schedule, demonstrating a high level of preparedness even during the demanding holiday season, specifically Christmas. The ability to meet deadlines and maintain efficiency during peak periods underscored their commitment to effective project management and client satisfaction.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Good communication 
• willing to help 
• good professionals with good results.

Are there any areas for improvement or something Securing could have done differently?

Nothing that I could think of right now. They provided good service.

BACKGROUND

Please describe your company and position.

I am the CSO of an IT services company

Describe what your company does in a single sentence.

We create software for the largest e-commerce companies

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Security Test

SOLUTION

How did you find Securing?

I knew their team

Why did you select Securing over others?

Good value for cost

How many teammates from Securing were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration testing :) can't describe it exactly

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

As in every project, there were places for improvement :)

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Very professional approach. People from this team show enthusiasm for their work

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

I haven't seen people so committed to their work for a long time

Are there any areas for improvement or something Securing could have done differently?

Like every customer, I would like to have everything cheaper ;)

BACKGROUND

Please describe your company and position.

I am the Information Security Officer of CGM Clinical Austria

Describe what your company does in a single sentence.

We create the future of e-health by developing software to optimize the medical and administrative processes of healthcare providers, including electronic communication with the patient.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration Testing

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration Testing for a hospital information system application.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

final penetration testing report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was clear and successfull. They were flexible and responded professionally to all our needs.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Professional work for appropriate price! The findings of the penetration tests are comprehensible and very useful and the recomended remediations are explained in detail.

Are there any areas for improvement or something Securing could have done differently?

no

BACKGROUND

Please describe your company and position.

I am an executive of an information technology company

Describe what your company does in a single sentence.

We provide IT Incident & Disruption Communication Tool

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Perform annual pentest

SOLUTION

How did you find Securing?

Online Search

Why did you select Securing over others?

• Close to my geographic location
• Pricing fit our budget
• Good value for cost

Describe the scope of work in detail. Please include a summary of key deliverables.

Performing annual pentests of our product.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Obtaining certificate confirming that penetration tests has been performed.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Communication and agreement process with Securing was quick and precise - there was no misunderstandings nor otherwise wasteful communication.

What was your primary form of communication with Securing?

Email or Messaging App

What did you find most impressive or unique about this company?

They understood our needs and tailored solutions for a perfect fit.

Are there any areas for improvement or something Securing could have done differently?

None.

BACKGROUND

Please describe your company and position.

I am the Security Manager of Infermedica

Describe what your company does in a single sentence.

https://infermedica.com/about

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration tests

SOLUTION

How did you find Securing?

• Online Search
• Referral

Why did you select Securing over others?

• High ratings
• Pricing fit our budget

Describe the scope of work in detail. Please include a summary of key deliverables.

The security tests of mobile applications were meant to verify whether the proper security mechanisms were in place to prevent unauthorized users from accessing the client’s data and infrastructure and to ensure that patient’s personal and medical data is not disclosed for potential attacker.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Final report with a summary of test results.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was perfect.

What was your primary form of communication with Securing?

Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed with their quick responses and very nice and friendly contact.

Are there any areas for improvement or something {provider_name} could have done differently?

Nothing to add.

BACKGROUND

Please describe your company and position.

I am the Security Manager of Infermedica

Describe what your company does in a single sentence.

https://infermedica.com/about

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration tests

SOLUTION

How did you find Securing?

• Online Search
• Referral

Why did you select Securing over others?

• High ratings
• Pricing fit our budget

Describe the scope of work in detail. Please include a summary of key deliverables.

The security tests of mobile applications were meant to verify whether the proper security mechanisms were in place to prevent unauthorized users from accessing the client’s data and infrastructure and to ensure that patient’s personal and medical data is not disclosed for potential attacker.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Final report with a summary of test results.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was perfect.

What was your primary form of communication with Securing?

Email or Messaging App

What did you find most impressive or unique about this company?

Quick acting and very nice and friendly contact.

Are there any areas for improvement or something Securing could have done differently?

Nothing to add.

BACKGROUND

Please describe your company and your position there.

CTO at early fintech startup

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Securing?

• Threat modeling
• Penetration testing
• Mobile app security testing

SOLUTION

How did you select this vendor and what were the deciding factors?

We search for cybersecurity companies in Europe shortlisted a few and selected Securing based on their communication, pricing, and experience.

Describe the project in detail and walk through the stages of the project.

We went through three threat modeling sessions infrastructure, mobile app, and backend, and in the end, they provided us with a detailed report. After those sessions, they performed penetration testing on the same parts and afterward provided a detailed report with vulnerability classification, description and explanation of attacks performed.

How many resources from the vendor's team worked with you, and what were their positions?

3-5

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify a few vulnerabilities that we were not aware of and through threat modeling sessions they were able to give developers a different perspective when it comes to thinking about security.

How effective was the workflow between your team and theirs?

Ther kept us updated and sessions that involved both companies were structured well.

What did you find most impressive or unique about this company?

We liked the collaboration between our developers and their team on threat modeling sessions

Are there any areas for improvement or something they could have done differently?

Not much.

BACKGROUND

Please describe your company and your position there.

I'm leading the software engineering division.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Securing?

Securing delivered penetration testing services to us a few times.

SOLUTION

How did you select this vendor and what were the deciding factors?

Expertise in the field, good communication, reasonable business approach

Describe the project in detail and walk through the stages of the project.

Securing performed penetration tests of our software. This was preceded by application design conversations, to make the tests reasonable. Afterwards, we've received a report as well as we've had some sessions to go through the results, countermeasures etc. The service included re-tests and final report as well.

How many resources from the vendor's team worked with you, and what were their positions?

Not sure - enough :).

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Securing demonstrated great penetration testing skills, identifying issues we weren't aware of. The communication side was great, the scheduling was quite flexible - all good.

How effective was the workflow between your team and theirs?

Very effective.

Are there any areas for improvement or something they could have done differently?

I think all worked out really well.

BACKGROUND

Please describe your company and your position there.

CEO of PandiFi, a blockchain technology company focused on consumer loans

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire SecuRing?

For an audit of our protocol's smart contracts

SOLUTION

How did you select this vendor and what were the deciding factors?

Word of mouth / a friend's recommendation

Describe the project in detail and walk through the stages of the project.

SecuRing provided an in-depth review of our smart contracts, including an assessment of potential security concerns.

How many resources from the vendor's team worked with you, and what were their positions?

2 auditors

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They found one critical flaw and several other minor ones and provided a written report that describes their findings.

How effective was the workflow between your team and theirs?

Extremely effectively. They were thoughtful, curious, engaged, and punctual.

What did you find most impressive or unique about this company?

I believed their approach was much more white-glove than other contract auditors. They took time to understand the big picture objectives of the protocol and did a manual code review to make sure that such objectives were met.

Are there any areas for improvement or something they could have done differently?

None