Trana

BACKGROUND

Please describe your company and position.

I am the Co-founder and CEO of Success.co

Describe what your company does in a single sentence.

Software-as-a-Service (SaaS) platform for business strategy planning and execution.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• High-level security audit
• Identify any external or internal security threats
• Penetration test report to share with clients

SOLUTION

How did you find Trana?

Contacted us

Why did you select Trana over others?

• Pricing fit our budget
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of the work:

• Web Application Security Assessment 
  • Authentication and session management security
  • Access control and authorization mechanisms
  • Cryptographic implementations
  • Business logic flaws
  • Client-side security issues
  • API security within the web application context
  • Input validation and injection flaws (SQLi, XSS, etc.)

Deliverables:

RAW Findings Excel Sheet

Findings Categorization by Severity

Risk Analysis & Business Impact Assessment

Technical Details & Proof-of-Concept (PoC) Videos

Actionable Remediation Guidance

Executive Summary

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measurable outcomes:

• A comprehensive list of all vulnerabilities discovered during the
  testing, shared for immediate review and mitigation planning.
• Mitigation project and internal security improvements based on the findings that benefit our customers.
• A full pen test report we can share with customers or prospects.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team at Trana delivered on time and within scope and budget. Their communication was proactive and they operated with a "give value first" mentality.

What was your primary form of communication with Trana?

• In-Person Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their expertise in Microsoft and social login vulnerabilities. Also their pragmatic approach to the project, where they provided simple and practical steps to mitigate certain risks.

Are there any areas for improvement or something Trana could have done differently?

Nothing I can think of.

BACKGROUND

Please describe your company and position.

I am the Head of Engineering of innDex

Describe what your company does in a single sentence.

The ultimate construction tool. Built by construction for construction, innDex makes site management easier, supercharges your team and puts the power back in your hands.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Web Application Penetration Testing

SOLUTION

How did you find Trana?

• Online Search
• Other

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Trana were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Identify and assess vulnerabilities: Conduct comprehensive testing to uncover any potential security vulnerabilities or weaknesses present within the scope of this engagement. 
Evaluate security controls: Evaluate the effectiveness of existing security controls and mechanisms implemented within the target assets. 
Provide actionable recommendations: Generate a comprehensive report outlining identified vulnerabilities, associated risks, and actionable recommendations for remediation and risk mitigation. 
These recommendations aim to enhance the security posture of the application to reduce the likelihood of successful cyberattacks.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The penetration testing engagement with Trana Infosec successfully achieved all objectives defined in the Statement of Work (SOW) and demonstrated measurable improvements in InnDex’s security posture.

100% of High-Severity Vulnerabilities Fixed: All five high-severity findings from the initial test -including multiple IDOR flaws, file access exposure, and excessive error message disclosure - were fully remediated and verified as closed in the October 2025 retest.

Improved Security Baseline: Medium and low issues were reduced from five to two, both of which were formally accepted as managed business risks.

Operational Efficiency: The testing and remediation cycle - from kickoff to validated closure - was completed within the scheduled 8-week period, demonstrating strong coordination between InnDex’s engineering and security teams.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Trana Infosec demonstrated strong project management throughout the engagement. The project followed a clearly defined schedule, with milestones established in the signed Statement of Work. All deliverables were provided on or ahead of schedule, and communication remained consistent and professional throughout.

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about Trana Infosec was their depth of technical expertise combined with clear, actionable communication. Their reporting went beyond simply listing vulnerabilities: they provided detailed exploit proofs, impact analyses, and pragmatic remediation guidance aligned with real-world application architecture.

Are there any areas for improvement or something Trana could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the DevOps Lead of Gridly AB

Describe what your company does in a single sentence.

Gridly AB is a content operations platform, empowering organizations to efficiently manage a content flow of increasing volume and complexity fueled by the rapid deployment of AI. With Gridly, teams can take control of the full content process from planning, creation, localization, quality assurance, and publication, to maintenance and support. And do so faster, with improved quality, better control - and at scale.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• The main objectives were to identify vulnerabilities through black box and gray box testing
• A detailed report with actionable recommendations to mitigate risks and improve our overall cybersecurity posture

SOLUTION

How did you find Trana?

Exploit

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Gridly recently hired Trana for their external penetration testing services, and we were very impressed with the results. As a small tech company, we needed to ensure our web applications and cloud infrastructure were secure against potential threats.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The team at Trana was professional, communicated clearly throughout the process, and completed the project on schedule. Their findings helped us patch critical issues before they could be exploited. Highly recommend for any business looking for reliable external pentest services!

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The pentest itself was completed within the agreed two-week window, and the detailed vulnerability report followed promptly without any delays.

What was your primary form of communication with Trana?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What I found most impressive about Trana was their uncanny ability to pinpoint exact security issues on our side that we hadn't even suspected. During the pentest, they uncovered subtle vulnerabilities in our API endpoints issues that our internal scans had completely missed. Their expertise in simulating real-world attacks, combined with advanced tools and a deep understanding of evolving threats, set them apart from other providers we've worked with.

Are there any areas for improvement or something Trana could have done differently?

Honestly, I couldn't find any significant areas for improvement with Trana—their services exceeded our expectations in every way.

BACKGROUND

Please describe your company and position.

I am the CTO & Co-Founder of AiSDR

Describe what your company does in a single sentence.

Automate job of SDRs with AI.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Penetration testing
• Security review

SOLUTION

How did you find Trana?

• Online Search
• Outreach

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Great culture fit

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Security review and graybox penetration testing.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Succesfully completed pentest with validations and certificates.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was great!

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The speed of work and quality of communication.

Are there any areas for improvement or something Trana could have done differently?

N/A

BACKGROUND

Introduce your business and what you do there.

I’m the director of TPM at CloudSEK, an AI-driven Threat Intelligence and risk prevention company. We help organizations identify, assess, and mitigate cyber threats.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Trana?

We needed help with our vulnerability assessment and penetration testing (VAPT).

SOLUTION

What was the scope of their involvement?

Trana provided VAPT services for our platform's security. The team was proactive in their work and covered all our products and platforms. Trana delivered a detailed VAPT scope, a comprehensive report, a coverage report, and benchmarking and comparisons among the industry.

What is the team composition?

We worked with 2–5 teammates from Trana.

How did you come to work with Trana?

Someone referred Trana to me. I chose them over other options because they had high ratings, offered good value for the cost, and had company values aligned with ours.

What is the status of this engagement?

We worked together in June 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Trana achieved our periodic VAPT way before the planned ETA. The detailed report was also very insightful, mentioning everything covered, industry comparisons, and things that could be made even better. We had 100% coverage on the modules and services across the platform and product range. The team delivered quality reports even when there were no findings. Trana also had a fast turnaround time (TAT) for the overall VAPT project, including retests. As a result, we were fully compliant with our organization's policies and industry standards.

How did Trana perform from a project management standpoint?

Trana delivered on time and even ahead of time. The team ensured timely communications and follow-ups. We communicated via virtual meetings, emails, and messaging apps.

What did you find most impressive about them?

I was impressed by Trana's depth of coverage details and superior support.

Are there any areas they could improve?

There's nothing they could have improved.

BACKGROUND

Please describe your company and position.

I am the CTO of a business services company

Describe what your company does in a single sentence.

B2B Software Solutions.  

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Digital Security Review

SOLUTION

How did you find Trana?

Online Search

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We approached Trana to conduct a penitration test of our application looking for vulnerabilities. and areas to improve our digital security.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trana quickly helped us identity areas for improvement with clear documentation and analysis of potential impact as well as advice on solutions. they were happy to asssit in testing the proposed solutions to ensure a good outcome 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Our contacts at Trana were very responsive, initially working with us to determine the areas of focus and then quickly presented a clear report on their findings and suggestions, then working with us to plan out implementation of updates where needed and finally confirming successful fixes.

What was your primary form of communication with Trana?

Email or Messaging App

What did you find most impressive or unique about this company?

I was very impressed by the speed and dedication Trana showed during our collaboration 

Are there any areas for improvement or something Trana could have done differently?

nothing comes to mind 

BACKGROUND

Introduce your business and what you do there.

 I’m the co-founder an acting CEO and CTO. We are 50-person SaaS company that serve enterprise clients in most of the world.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Trana?

 We needed a manual penetration test to identify potential vulnerabilities in our SaaS platform.

SOLUTION

What was the scope of their involvement?

 Trana performed a one-week manual penetration test (grey box). The team provided a detailed report of their findings, including step-by-step directions for recreating the issues and guidance on how to patch each issue.

What is the team composition?

 We worked with at least two teammates from Trana.

How did you come to work with Trana?

 Trana proactively reached out to us via email about two years ago. The team helped us find a vulnerability to prove their value early on. Our conversation with the manager demonstrated further professionalism and convinced us to give them a try.

What is the status of this engagement?

 We worked with them for the first time in September 2024, and our most recent project was from September–October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

 Trana helped us identify and solve five important vulnerabilities. As security is essential to our customers, finding and fixing security issues is crucial and allows us to continue working with large companies.

How did Trana perform from a project management standpoint?

 Trana's project management was very professional and reliable. We communicated via email.

What did you find most impressive about them?

 The quality of Trana's reports and on-time delivery was impressive.

Are there any areas they could improve?

 I can't think of anything for Trana to improve.

BACKGROUND

Please describe your company and position.

I am the Co-Founder of Claritalk

Describe what your company does in a single sentence.

Claritalk helps you unlock the full potential of every conversation. During your calls, you’ll receive real-time guidance on the topics you want to cover. Afterwards, you’ll get a detailed analysis of everything that was discussed, seamlessly ready to sync with your CRM. You’ll also receive personalized coaching to help you fine-tune your communication even further. With Claritalk, you become the best version of yourself.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Penetration Testing
• Advice on how to secure the app on critical points
• Verify the steps taken to secure the infrastructure

SOLUTION

How did you find Trana?

Online Search

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Deliverable 1: list of found vulnerabilities, severity score with proposed solutions 
• Deliverable 2: list of steps taken to verify our solutions to the found vulnerabilities

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our application security was greatly improved.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

No remarks.

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Customer centric approach. Flexible on timeline and agreements made.

Are there any areas for improvement or something Trana could have done differently?

No remarks

BACKGROUND

Please describe your company and position.

 I am the CTO of an affiliate marketing software company.

Describe what your company does in a single sentence.

We provide affiliate marketing software for marketplace sellers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Perform a penetration test on our web app

SOLUTION

How did you find Trana?

LinkedIn

Why did you select Trana over others?

Pricing fit our budget

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

They performed a penetration test on our web app. The provided a list of vulnerabilities found and re-tested our service again after they were all patched.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We were able to patch a few discovered vulnerabilities in our web app.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered on time and were responsive

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their good communication and clear expectations stood out. They did good work.

Are there any areas for improvement or something Trana could have done differently?

Nothing major!