Stratus Security

BACKGROUND

Please describe your company and your position there.

I'm the owner of a Web3 financial services company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Stratus Security?

We were launching a decentralized cryptocurrency exchange and wanted to get a full audit of our system to check for vulnerabilities.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online for consulting firms and after interviewing them, we chose this vendor on their experience and package.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website, infrastructure and smart contracts as three separate engagements using the same penetration tester throughout. At the end of the project they delivered 3 reports, each detailing the risks and remediation for security issues identified. Once we fixed the issues, they came back and checked they were correctly remediated.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager and a penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They identified several issues including critical issues that were missed by previous providers. They worked with us to make sure the risk was understood and were correctly remediated.

How effective was the workflow between your team and theirs?

As a client, we found the workflow between our team and the penetration testing team to be very effective. The testing team was professional and responsive throughout the entire process. They provided us with clear communication and regular updates on the progress of the test. They were also very helpful in addressing any questions or concerns that we had.

Our team was actively involved in the testing process, which helped to ensure that the scope of the test was comprehensive and covered all relevant areas. The testing team provided us with a detailed report and walked us through the findings and recommendations. Overall, the collaboration between our team and the testing team was seamless and resulted in a thorough and effective penetration test.

What did you find most impressive or unique about this company?

What impressed us the most was their attention to detail and the level of expertise of their team. They were able to uncover vulnerabilities that our internal team had not been able to detect and provided us with a comprehensive report that not only detailed the vulnerabilities but also assessed the risk and priority of each issue.

Additionally, the communication and collaboration between our team and the testing team was seamless and they were very responsive to any questions or concerns we had. It was a pleasure working with this penetration testing company and we would definitely recommend them to others.

Are there any areas for improvement or something they could have done differently?

The team was so thorough in their testing that they uncovered more vulnerabilities than we were prepared to handle at once, which made it a bit overwhelming for us. It was clear that they left no stone unturned and their efforts helped us to better understand and address potential security weaknesses in our network and applications.

Despite the initial overwhelming feeling, we were able to prioritize and tackle the issues thanks to the clear and actionable recommendations provided by the testing team. All in all, it was a valuable experience and we appreciate the company's dedication to uncovering potential vulnerabilities.