Securing

BACKGROUND

Please describe your company and position.

I am the Head of Security of mTab

Describe what your company does in a single sentence.

We are developing our own product - a platform for analysis, reporting and interactive visualization of market research survey data for international organizations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Conducting the security audit of the AWS configuration

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

SecuRing conducted an assessment of the AWS resources configuration and provided recommendations to enhance our security. The scope of work provided by SecuRing included:

• Reviewing the compliance of resource configurations with AWS best practices
• Searching for common misconfigurations and publicly available services, attempting to escalate privileges or access any confidential information
• Assessing the cloud environment architecture

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Vulnerabilities and security weaknesses were identified that could be potentially exploited and affect the security of the services provided.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• Securing delivered all products within the agreed time.
• The company showed great flexibility and excellent communication throughout the project.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Securing demonstrated an excellent level of competence and professionalism. 
• Their team of cybersecurity experts possesses deep knowledge and skills that translate into effective identification and mitigation of potential threats. 
• The work they conducted during security audit was comprehensive.
• Their analysis provided us with valuable insights into our system.

Are there any areas for improvement or something Securing could have done differently?

We haven't identified any.

BACKGROUND

Please describe your company and position.

I am the Engineering Manager of Postman

Describe what your company does in a single sentence.

Postman is an API platform for building and using APIs. Postman simplifies each step of the API lifecycle and streamlines collaboration so you can create better APIs, faster.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• macOS Security Training

SOLUTION

How did you find Securing?

• Online Search
• Referral

Why did you select Securing over others?

Referred to me

How many teammates from Securing were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired SecuRing for an in-depth private training on macOS security and reverse engineering, in the context of the upcoming macOS hybrid Postman desktop application.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The SecuRing custom macOS security and reverse engineering training was spectacular. Very in-depth and hands-on, on topics that proved to be extremely hard to get expertise on otherwise. The valuable learnings that our engineers got from this training truly shaped our view of security on Apple platforms and the overall architecture of our project.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The custom training package was extremely well planned and thought-through. One of the best private trainings we ever engaged with. SecuRing was very professional, and all the attendees loved the sessions.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

SecuRing proved to have extremely deep knowledge and expertise on Apple platforms. Not only from a security point of view, but from general reverse engineering point of view that also positively impacted the work of our application developers. The training sessions, demonstrations, workshops, and accompanying materials were very engaging and well designed, and the instructor always went the extra mile to cover everything we needed for Postman to succeed on Apple platforms.

Are there any areas for improvement or something Securing could have done differently?

Nothing I can think of. This was hands-on one of the best training sessions I ever attended. I wish we have done it earlier, and we hope to continue working with SecuRing in the future.

BACKGROUND

Please describe your company and your position there.

I'm the VP of Technology at The Software House, a company helping our customers to solve their challenges with technology, but also helping them to become a technological leader.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Securing?

We're an experts when it comes to cloud development, however, we were also aware that our experience when it comes to the security of the cloud is not top-level. Because of that, we decided, we need an external consulting company to help us reach a level we aimed for.

SOLUTION

How did you select this vendor and what were the deciding factors?

Securing was recommended by our long-term trainings partner. Since we have worked with team for multiple different projects, we trusted their choice and so we've our cooperation started.

Describe the project in detail and walk through the stages of the project.

In order to improve our experience and skills when it comes to AWS security we decided to start with a small group of 10 people, each having a different experience when it comes to the cloud. The group was mixed of a backend, frontend and devops engineers. In order to prepare for such setup, we had a preparation call to fully understand a challenge here.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with one very skilled Senior IT Security Consultant.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

There are to main KPIs to measure the success in this project. The first one is a group happiness and it was 10/10. The whole group found the training not only interesting but also useful, full of real life examples and knowledge that could be used right away.

The 2nd KPI is how this experience can be used in actual project. Here once again we have a huge success because some of the examples were actually something we struggled before (and so we finally had a solution).

How effective was the workflow between your team and theirs?

I would rate it on two different levels - VP of Technology point of view and Team PoV. From my perspective from the very start of the cooperation I felt convinced that we are working with an expert who can actually help us grow on that field. From Team perspective the training was very professional full of wonderful examples and tasks. The preparation was top notch and so it was very well organized.

What did you find most impressive or unique about this company?

The whole customer experience was on a different level. Everything was tailored to our needs, even the training materials. I was impressed.

Are there any areas for improvement or something they could have done differently?

I doubt there was something to improve. The Team was very happy with the training even though the group was mixed when it comes to the cloud experience.

BACKGROUND

Please describe your company and your position there.

Filestack and TINT are both on the mission to harness user generated content. Filestack is a set of tools and APIs for developers to help them manage file uploads, transformations and delivery. TINT is a platform for marketers that helps them aggregate, curate and repurpose user generated content across many marketing channels. I'm VP of Engineering at Filestack and TINT responsible for all engineering and security aspects of our operation.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire SecuRing?

SecuRing was hired to perform penetration testing for both Filestack and TINT platforms.

SOLUTION

How did you select this vendor and what were the deciding factors?

We have been shopping for penetration testing provider for long time. Securing was the only vendor that wanted to hear our exact needs for penetration testing and was really interested in how our platforms are built so that they can target their testing accordingly. They performed comprehensive threat modeling and adjusted their service to the complexity of both our products.

Describe the project in detail and walk through the stages of the project.

Before we signed contract Securing performed detailed interview about our platforms, needs and expectations. Securing performed detailed threat modeling session with our team followed by over a week-long penetration testing.

We were getting immediate disclosures of vulnerabilities found and detailed report at the end of the testing. After we fixed vulnerabilities, Securing performed re-testing to confirm that they were solved. After the successful closing of the project we received final version of the report and executive summary version.

How many resources from the vendor's team worked with you, and what were their positions?

For each of our platform we tested there were 2 to 3 security engineers assigned. We always communicated directly with Mateusz -Principal Security Consultant, he was extremely helpfull and responsive. They have no sales people - that was a big win for us.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Due to the complexity of our platforms, penetration testing required more effort than standard web application testing. Securing did great job, they found some really complex vulnerabilities that our internal testing could not identify. Each vulnerability was explained in detail with remediation suggestions. In their final report, they also included recommendations to secure our platform further.

How effective was the workflow between your team and theirs?

They were very responsive, professional, and detailed in their communication despite the difference in time zones.

What did you find most impressive or unique about this company?

SecuRing really met our expectations for penetration testing service. They were really interested on how our platforms are built so they can adjust their methodology to our needs. They also provided very detailed report with vulnerabilities found, remediation suggestions and recommendations.

Are there any areas for improvement or something they could have done differently?

No. They were very proffesional during entire project lifecycle.

BACKGROUND

Please describe your company and position.

I am the Senior Manager of Flexi Solutions sp. z o.o. sp. k.

Describe what your company does in a single sentence.

Provides and implements Enterprise Performance Management software for corporate clients.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration tests of developed solution.
• Audit of solution's security and architecture.

SOLUTION

How did you find Securing?

Online Search

Why did you select Securing over others?

High ratings

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope:
1. Penetration tests of a solution consisting of multiple applitations (2 client apps & server-side API). 
2. Re-tests after implementation of fixes.

Key deliverables:
1. Initial report with identified security issues and set of improvement suggestions.
2. Final report including implemented fixes.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Securing identified 1 critical and 2 minor vulnerabilities; provided 3 additional suggestions.
• All vulnerabilities has been fixed and re-tested.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• Good communication from start to end.
• Delivery as scheduled.

What was your primary form of communication with Securing?

Email or Messaging App

What did you find most impressive or unique about this company?

• Expertise in the field.
• Their problem-solving and knowledge-sharing attitudes were impressive.

Are there any areas for improvement or something Securing could have done differently?

I don't really think so.

BACKGROUND

Please describe your company and position.

I am the CTO of Teylor AG

Describe what your company does in a single sentence.

Teylor is a technology company that digitizes lending processes for the benefit of banks, small and medium-sized borrowers, and private debt investors.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration test for Fintech Platform

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

• High ratings
• Referred to me

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

SecuRing was tasked with conducting a penetration test of our platform. They consulted with our teams, delivered a detailed report outlining potential vulnerabilities, fixes for identified issues and general security recommendations.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Business and technical review

App scanning

Report and remidation scan

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All deliverables were well-managed and timely.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Very good security skills combined with business understanding.

Are there any areas for improvement or something Securing could have done differently?

No

BACKGROUND

Please describe your company and position.

I am a director of Opinr Inc

Describe what your company does in a single sentence.

SAAS - Third party risk management

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Penetration testing

SOLUTION

How did you find Securing?

• Clutch Site
• Other

Why did you select Securing over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Conduct penetration testing and retesting after fixes

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Timely testing 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they were prompt in their responses

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Very responsive and quick turnover

Are there any areas for improvement or something Securing could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the Head of Engineering of Juriba

Describe what your company does in a single sentence.

We enable our customers to manage their device and application lifecycles.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

Software vulnerability assessment

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

Referred to me

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Conducted a third party assessment of two of our software products.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Written reports, containing methodology of testing and findings.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Responded exceptionally quickly and conducted tests in a matter of weeks after requesting their services. They were prompt to respond to any queries and straightforward in their communication.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Straightforward with no unnecessary communication or burden. 
• Clearly understood their domain and asked insightful questions.

Are there any areas for improvement or something Securing could have done differently?

Nothing

BACKGROUND

Please describe your company and position.

I am the Offensive Security Manager

Describe what your company does in a single sentence.

Our company is a leading international tobacco company working to deliver a smoke-free future and evolving its portfolio for the long term to include products outside of the tobacco and nicotine sector. Since 2008, PMI has invested more than USD 10.5 billion to develop, scientifically substantiate and commercialize innovative smoke-free products for adults who would otherwise continue to smoke, with the goal of completely ending the sale of cigarettes. 

In November 2022, PMI acquired Swedish Match – a leader in oral nicotine delivery – creating a global smoke-free champion led by the companies’ IQOS and ZYN brands. As of September 30, 2023, PMI's smoke-free products were available for sale in 82 markets, and PMI estimates that approximately 19.7 million adults around the world had already switched to IQOS and stopped smoking. 

Smoke-free products account for approximately 36.2% of PMI’s total third-quarter 2023 net revenues. With a strong foundation and significant expertise in life sciences, PMI announced in February 2021 its ambition to expand into wellness and healthcare areas and, through its Vectura Fertin Pharma business, aims to enhance life through the delivery of seamless health experiences. For more information, please visit www.pmi.com and www.pmiscience.com.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Enhance application security posture with offensive security services

SOLUTION

How did you find Securing?

Referral

Why did you select Securing over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Securing were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work encompassed penetration testing, application security assessment, and threat modeling consulting for web applications, mobile applications, and cloud infrastructure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A high-quality report was delivered on time, resulting in high satisfaction from our stakeholders.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Deliveries were punctual, with rapid responses and exceptional flexibility in accommodating changes to the project timeline.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

In terms of availability, their small team can rival larger companies with significantly greater resources.

Are there any areas for improvement or something Securing could have done differently?

Nothing comes to mind at the moment.

BACKGROUND

Please describe your company and position.

I am the IT Security Expert of a financial services company.

Describe what your company does in a single sentence.

Selling financial services - loans.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Securing to accomplish?

• Pentesting Insurance Web Application

SOLUTION

How did you find Securing?

Already knew the company.

Why did you select Securing over others?

• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Securing were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Pentest of a critical internet facing application. The assessment aimed to ensure the overall security, integrity and confidentiality of the application. 
• Deliverables: detailed report of identified vulnerabilities, misconfigurations, errors with risk levels, and proposed remediation. 

Challenges: 

short time frame to deliver. 

• Securing accommodated my request in time. 

What is the most impressive is that Securing performed the pentest very well during the Christmas holiday season.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Identified critical and high severity vulnerabilities 
• worked under pressure, especially that we were between Christmas and NYE.
• provided clear pentest report
• provided the opportunity to meet and discuss the vulnerabilities
• showed due diligence and due care.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Securing exhibited commendable project management throughout the engagement. Their responsiveness was noteworthy, promptly addressing inquiries and accommodating needs in a timely manner. 
Importantly, the team consistently delivered on schedule, demonstrating a high level of preparedness even during the demanding holiday season, specifically Christmas. The ability to meet deadlines and maintain efficiency during peak periods underscored their commitment to effective project management and client satisfaction.

What was your primary form of communication with Securing?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Good communication 
• willing to help 
• good professionals with good results.

Are there any areas for improvement or something Securing could have done differently?

Nothing that I could think of right now. They provided good service.