Trana

BACKGROUND

Please describe your company and position.

I am the Head of Engineering of innDex

Describe what your company does in a single sentence.

The ultimate construction tool. Built by construction for construction, innDex makes site management easier, supercharges your team and puts the power back in your hands.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Web Application Penetration Testing

SOLUTION

How did you find Trana?

• Online Search
• Other

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Trana were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Identify and assess vulnerabilities: Conduct comprehensive testing to uncover any potential security vulnerabilities or weaknesses present within the scope of this engagement. 
Evaluate security controls: Evaluate the effectiveness of existing security controls and mechanisms implemented within the target assets. 
Provide actionable recommendations: Generate a comprehensive report outlining identified vulnerabilities, associated risks, and actionable recommendations for remediation and risk mitigation. 
These recommendations aim to enhance the security posture of the application to reduce the likelihood of successful cyberattacks.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The penetration testing engagement with Trana Infosec successfully achieved all objectives defined in the Statement of Work (SOW) and demonstrated measurable improvements in InnDex’s security posture.

100% of High-Severity Vulnerabilities Fixed: All five high-severity findings from the initial test -including multiple IDOR flaws, file access exposure, and excessive error message disclosure - were fully remediated and verified as closed in the October 2025 retest.

Improved Security Baseline: Medium and low issues were reduced from five to two, both of which were formally accepted as managed business risks.

Operational Efficiency: The testing and remediation cycle - from kickoff to validated closure - was completed within the scheduled 8-week period, demonstrating strong coordination between InnDex’s engineering and security teams.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Trana Infosec demonstrated strong project management throughout the engagement. The project followed a clearly defined schedule, with milestones established in the signed Statement of Work. All deliverables were provided on or ahead of schedule, and communication remained consistent and professional throughout.

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about Trana Infosec was their depth of technical expertise combined with clear, actionable communication. Their reporting went beyond simply listing vulnerabilities: they provided detailed exploit proofs, impact analyses, and pragmatic remediation guidance aligned with real-world application architecture.

Are there any areas for improvement or something Trana could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the DevOps Lead of Gridly AB

Describe what your company does in a single sentence.

Gridly AB is a content operations platform, empowering organizations to efficiently manage a content flow of increasing volume and complexity fueled by the rapid deployment of AI. With Gridly, teams can take control of the full content process from planning, creation, localization, quality assurance, and publication, to maintenance and support. And do so faster, with improved quality, better control - and at scale.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• The main objectives were to identify vulnerabilities through black box and gray box testing
• A detailed report with actionable recommendations to mitigate risks and improve our overall cybersecurity posture

SOLUTION

How did you find Trana?

Exploit

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Gridly recently hired Trana for their external penetration testing services, and we were very impressed with the results. As a small tech company, we needed to ensure our web applications and cloud infrastructure were secure against potential threats.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The team at Trana was professional, communicated clearly throughout the process, and completed the project on schedule. Their findings helped us patch critical issues before they could be exploited. Highly recommend for any business looking for reliable external pentest services!

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The pentest itself was completed within the agreed two-week window, and the detailed vulnerability report followed promptly without any delays.

What was your primary form of communication with Trana?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What I found most impressive about Trana was their uncanny ability to pinpoint exact security issues on our side that we hadn't even suspected. During the pentest, they uncovered subtle vulnerabilities in our API endpoints issues that our internal scans had completely missed. Their expertise in simulating real-world attacks, combined with advanced tools and a deep understanding of evolving threats, set them apart from other providers we've worked with.

Are there any areas for improvement or something Trana could have done differently?

Honestly, I couldn't find any significant areas for improvement with Trana—their services exceeded our expectations in every way.

BACKGROUND

Please describe your company and position.

I am the CTO of a software company

Describe what your company does in a single sentence.

Automation for wholesale distribution

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Pentesting

SOLUTION

How did you find Trana?

Other

Why did you select Trana over others?

They found a security hole for free

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Trana to conduct a thorough security assessment covering our AWS cloud infrastructure, as well as Black Box and Gray Box penetration testing of our web applications.

Scope of Work:

The engagement included a deep dive into our AWS environment, identifying misconfigurations in IAM, storage policies, logging, and network architecture. For the web applications, Trana performed external Black Box web app testing to uncover exposed attack surfaces and Gray Box web app testing with user-level access to identify privilege escalation paths, logic flaws, and insecure access controls.

Key Deliverables:

• A comprehensive technical report with prioritized vulnerabilities, risk impact, and actionable remediation steps
• An executive summary tailored for leadership
• Raw findings in Excel for engineering integration
• Proof-of-concept evidence where applicable
• A dedicated Slack channel for direct collaboration and rapid response
• Free retesting to verify fixes

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Specific high priority security vulnerabilities identified and fixed.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Responsive and very easy to work with

What was your primary form of communication with Trana?

Email or Messaging App

What did you find most impressive or unique about this company?

Right before working with Trana, we did a pentest with a highly respected firm, and they found no vulnerabilities that actually mattered. Then we worked with Trana and they found multiple real vulnerabilities, some of them critical. They were super easy to work with and competent. We'll 100% be using them for our next pentest as well. If you want to actually concerned about security and want to find your holes, I highly recommend Trana.

Are there any areas for improvement or something Trana could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the CTO of a business services company

Describe what your company does in a single sentence.

B2B Software Solutions.  

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Digital Security Review

SOLUTION

How did you find Trana?

Online Search

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We approached Trana to conduct a penitration test of our application looking for vulnerabilities. and areas to improve our digital security.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trana quickly helped us identity areas for improvement with clear documentation and analysis of potential impact as well as advice on solutions. they were happy to asssit in testing the proposed solutions to ensure a good outcome 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Our contacts at Trana were very responsive, initially working with us to determine the areas of focus and then quickly presented a clear report on their findings and suggestions, then working with us to plan out implementation of updates where needed and finally confirming successful fixes.

What was your primary form of communication with Trana?

Email or Messaging App

What did you find most impressive or unique about this company?

I was very impressed by the speed and dedication Trana showed during our collaboration 

Are there any areas for improvement or something Trana could have done differently?

nothing comes to mind 

BACKGROUND

Introduce your business and what you do there.

 I’m the co-founder an acting CEO and CTO. We are 50-person SaaS company that serve enterprise clients in most of the world.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Trana?

 We needed a manual penetration test to identify potential vulnerabilities in our SaaS platform.

SOLUTION

What was the scope of their involvement?

 Trana performed a one-week manual penetration test (grey box). The team provided a detailed report of their findings, including step-by-step directions for recreating the issues and guidance on how to patch each issue.

What is the team composition?

 We worked with at least two teammates from Trana.

How did you come to work with Trana?

 Trana proactively reached out to us via email about two years ago. The team helped us find a vulnerability to prove their value early on. Our conversation with the manager demonstrated further professionalism and convinced us to give them a try.

What is the status of this engagement?

 We worked with them for the first time in September 2024, and our most recent project was from September–October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

 Trana helped us identify and solve five important vulnerabilities. As security is essential to our customers, finding and fixing security issues is crucial and allows us to continue working with large companies.

How did Trana perform from a project management standpoint?

 Trana's project management was very professional and reliable. We communicated via email.

What did you find most impressive about them?

 The quality of Trana's reports and on-time delivery was impressive.

Are there any areas they could improve?

 I can't think of anything for Trana to improve.

BACKGROUND

Please describe your company and position.

I am the Co-Founder of Claritalk

Describe what your company does in a single sentence.

Claritalk helps you unlock the full potential of every conversation. During your calls, you’ll receive real-time guidance on the topics you want to cover. Afterwards, you’ll get a detailed analysis of everything that was discussed, seamlessly ready to sync with your CRM. You’ll also receive personalized coaching to help you fine-tune your communication even further. With Claritalk, you become the best version of yourself.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Penetration Testing
• Advice on how to secure the app on critical points
• Verify the steps taken to secure the infrastructure

SOLUTION

How did you find Trana?

Online Search

Why did you select Trana over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Deliverable 1: list of found vulnerabilities, severity score with proposed solutions 
• Deliverable 2: list of steps taken to verify our solutions to the found vulnerabilities

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our application security was greatly improved.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

No remarks.

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Customer centric approach. Flexible on timeline and agreements made.

Are there any areas for improvement or something Trana could have done differently?

No remarks

BACKGROUND

Please describe your company and position.

 I am the CTO of an affiliate marketing software company.

Describe what your company does in a single sentence.

We provide affiliate marketing software for marketplace sellers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Perform a penetration test on our web app

SOLUTION

How did you find Trana?

LinkedIn

Why did you select Trana over others?

Pricing fit our budget

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

They performed a penetration test on our web app. The provided a list of vulnerabilities found and re-tested our service again after they were all patched.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We were able to patch a few discovered vulnerabilities in our web app.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered on time and were responsive

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their good communication and clear expectations stood out. They did good work.

Are there any areas for improvement or something Trana could have done differently?

Nothing major!

BACKGROUND

Please describe your company and position.

I am the Infra Manager of Notta

Describe what your company does in a single sentence.

Automatically convert your meetings, interviews, or recordings into searchable text with Notta. Transcribe, edit, summarize, and collaborate all in a single workflow to stay productive.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Penetration testing

SOLUTION

How did you find Trana?

Vulnerability Report

Why did you select Trana over others?

Good value for cost

Describe the scope of work in detail. Please include a summary of key deliverables.

Deliver test reports, point out the safety risks in the system, provide repair suggestions, and assist in retesting

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Test Report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Deliver items on time. Assist us in the repair as much as possible

What was your primary form of communication with Trana?

Email or Messaging App

What did you find most impressive or unique about this company?

Their ability to detect security vulnerabilities stood out.

Are there any areas for improvement or something Trana could have done differently?

~

BACKGROUND

Please describe your company and position.

I am the Executive of Snorkl

Describe what your company does in a single sentence.

Snorkl: AI-powered feedback that understands student work in any format—voice, video, or drawing.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Pen testing

SOLUTION

How did you find Trana?

Online Search

Why did you select Trana over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

1. Identify and assess vulnerabilities: Conduct comprehensive testing to uncover any potential security vulnerabilities or weaknesses present within the scope of this engagement.

2. Evaluate security controls: Evaluate the effectiveness of existing security controls and mechanisms implemented within the target assets.

3. Provide actionable recommendations: Generate a comprehensive report outlining identified vulnerabilities, associated risks, and actionable recommendations for remediation and risk mitigation. These recommendations aim to enhance the security posture of the application to reduce the likelihood of successful cyberattacks.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Completed initial testing and providded comprehensive report
• Completed re-testing and providded comprehensive report 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They integrated into our Slack messaging workspace to faciliate seamless communication. They provided timely updates and shared all assets in a secure manner.

What was your primary form of communication with Trana?

Email or Messaging App

What did you find most impressive or unique about this company?

The quality, timeliness, and value of the penetration testing services.

Are there any areas for improvement or something Trana could have done differently?

No, they did an excellent job.

BACKGROUND

Please describe your company and position.

 I am the CTO of an it services company 

Describe what your company does in a single sentence.

Email migration & stats

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trana to accomplish?

• Security audit & pentest

SOLUTION

How did you find Trana?

Vulnerability Report

Why did you select Trana over others?

• Pricing fit our budget
• Demonstrated professionality and good faith

How many teammates from Trana were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Web Application Security Assessment (Gray & Black Box)

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Vulnerability assessment

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered on time. Rechecked once corrections were made. Good communication.

What was your primary form of communication with Trana?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The fact that they offered a vulnerability report, POC and solution first hand, instead of asking for a reward like literally every other company out there.

Are there any areas for improvement or something Trana could have done differently?

We're happy with them.