Trilight Security

BACKGROUND

Please describe your company and position.

I am the CEO of a cybersecurity company 

Describe what your company does in a single sentence.

We are an international cyber security services provider.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

• Provide resources required to accelerate the digital forensics investigation task.

SOLUTION

How did you find Trilight Security?

Referral

Why did you select Trilight Security over others?

• High ratings
• Pricing fit our budget
• Referred to me

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We are a managed security service provider offering various cybersecurity services. During one of our projects, we required additional resources to accelerate digital forensics project we were delivering to one of our customers. We required additional resources with specific skills to meet a very tight time schedule. This is why we engaged Trilight Security, a cybersecurity company providing a wide range of white-label cybersecurity services. Their experts made some valuable contributions into the investigation and helped us identify potential compromise point, described in provided report.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trilight Security experts assisted us with identifying the logic of the incident, analysis of logs, and also, performing a dark web monitoring activity. All the activities helped us progress the investigation.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was okay; they were always available and provided the required input in a timely and efficient manner.   

What was your primary form of communication with Trilight Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Communications were very efficient and friendly. We liked it. 

Are there any areas for improvement or something Trilight Security could have done differently?

They did a good job in a timely manner. Very professional.

BACKGROUND

Please describe your company and position.

 I am the CTO of an information technology company 

Describe what your company does in a single sentence.

Cyber security services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

• Provide resources required to accelerate the incident response and dark web monitoring tasks.

SOLUTION

How did you find Trilight Security?

Referral

Why did you select Trilight Security over others?

• High ratings
• Pricing fit our budget
• Referred to me

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We are a managed security service provider offering incident response services among other. At some point we required additional resources to accelerate incident response project we were delivering to one of our customers, as the project was marked by extensive workload and very tight schedule. Because of this we decided to enhance our resources for this activity and engaged Trilight Security, a cybersecurity company known to provide white label cybersecurity services. Their experts helped us quickly identify the root cause of the incident and also helped discover customer’s leaked data available in the dark net.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trilight Security experts helped us with the analysis of logs and really contributed to identifying the incident root cause. Additionally, they performed a dark web monitoring activity and discovered the set of leaked data. Both outcomes helped us provide timely and actionable recommendations to our client.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was just fine. All the deliverables were on schedule, and the team was quite proactive during cooperation.   

What was your primary form of communication with Trilight Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We liked their communication style: quite easygoing and efficient.     

Are there any areas for improvement or something Trilight Security could have done differently?

Nothing to add

BACKGROUND

Please describe your company and position.

 I am the CEO of an information technology company 

Describe what your company does in a single sentence.

We are a cybersecurity services provider focusing on threat intelligence and dark web monitoring services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

Provide penetration testing services at our request

SOLUTION

How did you find Trilight Security?

Referral

Why did you select Trilight Security over others?

• High ratings
• Close to my geographic location
• Good value for cost

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We are a cybersecurity service provider working with different clients around the globe. We use cloud infrastructure and web application for the provision of our services and getting ready to compliance certification we decided to conduct a thorough penetration testing of our infrastructure. We were recommended to engage Trilight Security for this task and we have chosen them, as they have proven expertise and excellent balance of quality and cost.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trilight Security successfully completed the network and web pentest tasks of the project. Certain vulnerabilities were identified by their ethical hackers and then eliminated in co-operation with their team. We see real improvement to the security level of both our cloud and web infrastructure. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We’ve been communicating with them freely and informally during the whole project duration. We like their approach and attitude.

What was your primary form of communication with Trilight Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What is really impressive about them is how they manage to combine simplicity of interactions with high productivity and expert results.   

Are there any areas for improvement or something Trilight Security could have done differently?

Everything is ok.

BACKGROUND

Please describe your company and position.

I am the InfoSec manager of a fintech company.

Describe what your company does in a single sentence.

Fintech company, licensed electronic money institution.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

• Conduct penetration testing of the key web applications and APIs used to provide services

SOLUTION

How did you find Trilight Security?

• Online Search
• Referral

Why did you select Trilight Security over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Referred to me

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We provide an online multi-currency payments functionality to our clients in the EU, thus we
work in a highly regulated financial services industry. To keep our customers’ data and their
payments safe, we devote a lot of attention to security of our web development process, and
conduct regular penetration testing of our web application infrastructure to achieve third-party
confirmations. For this year’s testing we searched for the EU based penetration testing services
provider and chose Trilight Security based on their proximity, proper business communication, affordable pricing , and valuable additional services they included into the offer.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We conduct regular security assessments of our web infrastructure, and it is pretty much
mature, so the task faced by Trilight Security was quite challenging. Despite objective
difficulties their ethical hackers were able to identify a few vulnerabilities of different
criticality level and worked closely with our team to help eliminate them. Also, Trilight
Security team conducted a dark web monitoring to make sure there were no leaked
credentials for the accounts on our domains.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was efficient and smooth. Trilight Security team
demonsrated knowledge, and they not only claim but really are ready to go extra mile for their
customers. We liked working with them and considered continuing the cooperation.

What was your primary form of communication with Trilight Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

It’s the overall impression and the fact they do care about security and really try to help 
their customers improve it.

Are there any areas for improvement or something Trilight Security could have done differently?

Not really, everything’s fine.

BACKGROUND

Please describe your company and position.

I am the Cybersecurity Engineer of Ciklum

Describe what your company does in a single sentence.

IT Product Company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

• IT
• AI

SOLUTION

How did you find Trilight Security?

• Online Search
• Referral

Why did you select Trilight Security over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Good value for cost

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our company is a large global provider of software development services working with B2B customers from Fortune 500. We’ve been providing hi-tech services to the most demanding customers for more than 2 decades already and we must pay ultimate attention to security and resilience of all our operations. We need to keep customers’ confidential data safe, provide highest availability of our services, go through regular compliance audits, so we are very attentive to the cybersecurity infrastructure of our company and conduct regular penetration testing of our internal network, cloud, and web infrastructure. We shortlisted Trilight Security based on the preliminary research of the EU penetration testing services providers and decided to choose them for the annual pentest based on their successful experience, expertise proved during negotiations, and flexible terms offered.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Trilight Security efficiently executed the network and web penetration testing parts of the project. Their professional services team was able to identify several vulnerabilities in the network and web infrastructure, that were successfully remediated by our local team in cooperation with Trilight experts. Cooperation with this cybersecurity services provider helped us improve cybersecurity level of several our internal systems and services.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Efficient project management and communications from Trilight team. They are quick to react, their feedbacks are productive, and they keep the deadlines.

What was your primary form of communication with Trilight Security?

Virtual Meeting

What did you find most impressive or unique about this company?

Everything went well; they are doing their job professionally and have a customer-first attitude.

Are there any areas for improvement or something Trilight Security could have done differently?

Everything’s fine.

BACKGROUND

Please describe your company and position.

I am the CIO of Proxima Research International LLC

Describe what your company does in a single sentence.

We provide our clients with innovative solutions in the field of market data, integration and support of CRM / ETMS, HCP / HCO database management, multi-channel marketing, implementation of BI solutions, marketing research and consulting with a focus on the pharmaceutical industry.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

1. Execute the penetration testing of our main web application in order to discover and eliminate potential vulnerabilities and improve the overall cybersecurity posture of our company.
2. Complete one of the obligatory requirements of the ISO 27001 compliance audit

SOLUTION

How did you find Trilight Security?

Referral

Why did you select Trilight Security over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Referred to me

How many teammates from Trilight Security were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We are focused on constant improvement of the cybersecurity posture of our business, so the task of penetration testing of our principal web platform providing market data to our clients was one of our priorities. We entrusted Trilight Security with the task of grey-box pentest, created a testing environment and provided their pentesters with several user accounts. 

They followed the OWASP and PTES methodologies to conduct thorough examination of our web application and were able to identify several vulnerabilities. All the findings were detailed and explained in the report presented to us. Additionally, thy provided detailed instructions on eliminations of those vulnerabilities, and added several general web application security recommendations.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We have had a very positive experience with them which really helped improve the overall level of security of our web application. They successfully identified several vulnerabilities of different criticality level and helped us eliminate them. Also, they provided a follow-up check to confirm successful elimination of the vulnerabilities by our developers.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Write: We really enjoyed co-operation with them. The timelines were observed; all communication were clear and efficient. Every step was discussed and agreed with us in due manner, all necessary precautions recommended and checked. The report presented by Trilight Security was executed in a detailed manner, with nice visual style. But what’s most important, all the recommendations were clear and actionable, which greatly simplified the remediation tasks for our developers

What was your primary form of communication with Trilight Security?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What most impressed us was their customer focus, flexibility, and readiness to meet our requests. Also, we were pleased with them providing two pentesters for more objective assessment.

Are there any areas for improvement or something Trilight Security could have done differently?

We believe everything is fine with them and their performance.

BACKGROUND

Please describe your company and position.

I am an executive at Olive Systems

Describe what your company does in a single sentence.

Providing software development outstaffing services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Trilight Security to accomplish?

• Improve cybersecurity posture
• Provide online security monitoring for employees

SOLUTION

How did you find Trilight Security?

Other

Why did you select Trilight Security over others?

• High ratings
• Pricing fit our budget
• Company values aligned
• Other

What was the size of Trilight Security’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Due to a sensitive nature of the services we provide and data we work with, we have always been attentive to the matters of cybersecurity. With the importance of this issue growing day by day, and following several inquiries from our existing and potential clients, we decided to start using the managed security service to protect our IT infrastructure and data involved in provision of our services.

 After that we agreed the scope of the managed security service, deciding that it should be 24/7 as a large share of our developers are working remotely from different parts of world, and agreed essential SLA terms, the Trilight Security team connected all the sources of logs to their SOC platform. This took a while, and was successfully completed in collaboration with our local IT team. 

After that Trilight Security started providing managed security service. The whole onboarding process took less than three weeks to the start of actual provisioning. The service included periodic vulnerability assessments and patch management.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Up to now we have had a very positive experience with the managed security service from Trilight Security, as there were timely prevented potentially critical incidents. There also were situations when their incident response assistance proved to be really helpful. 

We now have more confidence as to our cybersecurity posture, and cooperation with MSSP also helped improve cybersecurity awareness of the team. And not only we’ve improved our cybersecurity situation, but also gained an additional competitive edge as seen by our clients.

What was your primary form of communication with Trilight Security?

• Virtual Meeting
• Email or Messaging App

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management by Trilight Security is efficient. They are helping both our IT personnel, responsible for the maintenance of our endpoint and cloud infrastructure, and sometimes even take the initiative of providing immediate advice to our employees, when required by the situation and 24/7 nature of the service.

What did you find most impressive or unique about this company?

The most impressive is their obvious focus on helping us address all the security issues emerging during our operations.

Are there any areas for improvement or something Trilight Security could have done differently?

Everything is ok for us.

BACKGROUND

Please describe your company and your position there.

I'm the director at the Revival Institute for Future, a Ukrainian management consulting agency focusing on development and implementation of public policy projects, healthcare management consulting, public innovation programs, project management, public relations and government relations.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Trilight Security?

We asked Trilight Security to provide analysis of our cybersecurity posture, offer and implement measures necessary to strengthen it, if required. The goal was to get realistic assessment of the cybersecurity posture and, especially, detect and remove vulnerabilities in the setup of our workplace IT infrastructure and cloud service we use for everyday operations.

SOLUTION

How did you select this vendor and what were the deciding factors?

They were mentioned by one of our customers which was provided certain cybersecurity services by Trilight Security earlier. We knew that overall satisfaction level was pretty high and approached Trilight with approximate scope of work and then the co-operation started.

Describe the project in detail and walk through the stages of the project.

We agreed for vulnerability assessment of our IT assets, in particular, assess our endpoint protection efficiency, setups of our remote workplaces and cloud resources.

How many resources from the vendor's team worked with you, and what were their positions?

On our side, the team member was our systems administrator. On Trilight’s side there were cybersecurity consultant and project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The Trilight Security cybersecurity consultant conducted a comprehensive study into all IT infrastructure we use in our essential business processes. We were offered to introduce certain changes into the setup of hardware and software we use, some of the applications and operating systems appeared to be requiring updates or patches.

Special attention we paid to security settings of cloud services we use. All the recommendations we received were implemented with the assistance or under supervision of Trilight’s representative, including replacement of anti-virus solution.

How effective was the workflow between your team and theirs?

Everything was just fine. None of the changes and improvements ever interrupted of workflow, all the feedbacks and inquiries from us were responded to ASAP.

What did you find most impressive or unique about this company?

They proved to have very professional and positive attitude towards our tasks. We were pleased by them being proactive and ready to do as much as necessary for our satisfaction. Some of their recommendations regarding IT and clouds went beyond the scope of project and let us improve efficiency of our operations.

Are there any areas for improvement or something they could have done differently?

Everything’s fine.

BACKGROUND

Please describe your company and your position there.

I'm the owner and CTO at Palaemo web development company responsible for development of some of the leading Ukrainian digital news publications, visited by millions of readers every month, as well as U.S. and EU based customers such as ESPN etc.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Trilight Security?

We ordered pentesting of our IT infrastructure to discover its vulnerabilities through simulated external attack.

What were your goals for this project?

Due to sensitive nature of a number of our projects and customers we needed the most up-to-date and comprehensive understanding of the vulnerability level of our network infrastructure, working places and customers' data.

SOLUTION

How did you select Trilight Security?

We sent several RFIs to cybersecurity companies in Ukraine and EU claiming focus on SMB and Trilight Security was one of the addressed companies. They provided satisfying references and demonstrated quite impressive skills of the cybersecurity specialists as well as pretty affordable prices. Upon communication with their technical staff we decider to go for their penetration testing services.

Describe the project in detail.

At first stage, Trilight Security has fulfilled penetration testing of our Internet gateway and our services, that accessible from external networks. We have provided only basic information about our infrastructure to Trilight specialists. In fact, it was only information that is possible to get from public sources. Penetration testing allowed us to get external view at our perimeter. We have got a report with issues and recommendations.

What was the team composition?

On our side there was our IT manager. On Trilight Security side there were two pentesting experts and a project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We were pretty satisfied of our cooperation with Trilight Security, so, at second stage, we have ordered vulnerability analysis of our information infrastructure and services. The cooperation has been very useful and we discussing the order of the Managed Security Services for our company.

How effective was the workflow between your team and theirs?

Trilight Security team has demonstrated excellent communication and cooperation during very first contact and until successful completion of the project. We were pretty much satisfied with their service and plan to engage with them again for further cybersecurity tasks..

What did you find most impressive about this company?

For the time being I'm mostly impressed by the ease of communications. All process details, changes etc were agreed quickly and efficiently. Vulnerability report and suggested action plan were exhausting.

Are there any areas for improvement?

No.

BACKGROUND

Please describe your company and your position there.

I'm the Technical Manager at Ukrkosmos, a Ukrainian public agency responsible for development and implementation of the national policy for space industry in Ukraine, as well as usage of space solutions to support informational & telecommunication environment in Ukraine.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Trilight Security?

We ordered comprehensive pentesting of Ukrkosmos IT infrastructure to identify vulnerabilities through attack simulation based on external penetration test.

What were your goals for this project?

Getting a clear view of the real situation with cybersecurity and overall vulnerability level with regard to real Internet threats to our network infrastructure and corporate data.

SOLUTION

How did you select Trilight Security?

We were approached by Trilight Security directly in late August with a request for company presentation during which they raised our interest by the combination of cybersecurity skills, including penetration testing services, and IT infrastructure skills, which was just the fit for our demands. Pricing was also within our limits. So, we decided to go for this supplier of cybersecurity service.

Describe the project in detail.

We went for the blackbox model of penetration testing that allowed us to imitate the real condition of attack. We never informed Trilight Security about any internal structure or components of our IT infrastructure and asked to examine the level of protection of our external gateway, VPN concentrator and DMZ.

What was the team composition?

On our side there were me and our system administrator. On Trilight Security side there were pentesting specialist, servers/storage specialist and project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We ran this testing to meet particular requirements of state IT policy and accompanying recommendation which we successfully did. Also, we’ve received very interesting and detailed report on results of penetration testing.

We’ve received useful and actionable information about possible vulnerabilities, level of criticality of each issue and possible workaround or solutions. We considered all recommendations and implemented the most critical of them.

How effective was the workflow between your team and theirs?

The workflow was just splendid. No communication delays or mistakes, all deadlines were met. Not a single flaw in this project workflow for us.

What did you find most impressive about this company?

In my opinion the most impressive thing about them is how a relatively new company is composed almost exclusively from cybersecurity and IT industry vets with profound knowledge and vast experience each.It was easy to with them because they understood what we wanted, sometimes even before we can define it ourselves. Proactive in the best meaning of this word.

Are there any areas for improvement?

Nothing particular I can think of.