UN1QUELY

BACKGROUND

Please describe your company and position.

I am the CTO of CodeSync

Describe what your company does in a single sentence.

CodeSync streams your code changes to the cloud while you are working in the IDEs, no commits needed

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Penetration Testing

SOLUTION

How did you find UN1QUELY?

• Referral
• Other

Why did you select UN1QUELY over others?

Referred to me

How many teammates from UN1QUELY were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration Testing was required for SOC-2 compliance, Type 2. Goal was to perform Penetration Testing for webapp and APIs for different security layers. If any vulnerabilities are found, they'll recommend some remeditions and will re-test those vulnerabilities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A PDF report explaining all the steps they performed, listing down all vulnerabilities they found during testing along with their severity level and finally suggestions to remedy those vulnerabilities

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They were very professional in delivering report on time and writing the report with all the details. We had very positive experience with their team. Their response time was very quick and helpful.

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed with the team's commitment and the quality of the deliverables. They performed re-testing on the same day we requested after about a month of gap we took to fix the vulnerabilities.

Are there any areas for improvement or something UN1QUELY could have done differently?

No, all was good

BACKGROUND

Please describe your company and position.

I am the CTO of a software company

Describe what your company does in a single sentence.

SaaS software for call centers and sales/service teams

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Application pen test to fulfill vendor audit requirements
• Secure code review via Snyk

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Application/API pen test, Snyk-based code review and writeups, documentation of needed fixes and re-testing

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Successful completion of pen testing and vulnerability remediation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team was responsive and helpful. We primarily communicated over Slack which made the process easy to keep organized.

What was your primary form of communication with UN1QUELY?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They had excellent subject-matter expertise and targeted reports.

Are there any areas for improvement or something UN1QUELY could have done differently?

None.

BACKGROUND

Please describe your company and your position there.

I am a lead software engineer who led the effort to remediate findings from a pentest.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

We were looking for someone to check out our systems and perform a pentest, such that we could remediate and move towards our own compliance goals.

SOLUTION

How did you select this vendor and what were the deciding factors?

We worked with them through Laika.

Describe the project in detail and walk through the stages of the project.

They performed multiple rounds of tests and were more than willing to check after each incremental update.

How many resources from the vendor's team worked with you, and what were their positions?

We had a few contacts work with us from UN1QUELY, two from Laika, and one internally.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to successfully provide feedback and were generous with their time in retesting.

How effective was the workflow between your team and theirs?

Fantastic.

What did you find most impressive or unique about this company?

To highlight again, the incremental retesting was definitely a huge plus.

Are there any areas for improvement or something they could have done differently?

n/a

BACKGROUND

Please describe your company and your position there.

Our firm is a SASS company in the recruiting space where I am an engineering manager.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

We hired UN1QUELY to conduct our annual pen test as part of our SOC2 review.

SOLUTION

How did you select this vendor and what were the deciding factors?

We found them through Laika, which is our main security compliance platform.

Describe the project in detail and walk through the stages of the project.

They used black box and gray box testing in order to find security holes in our platform. These security holes included infrastructural level staff as well as general API security issues. Once reported they verified that they were indeed fixed.

How many resources from the vendor's team worked with you, and what were their positions?

We had a few people working with us including a project manager and the penetration testers themselves.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

This was able to help us maintain our SOC2 certification.

How effective was the workflow between your team and theirs?

Very effective. They were very responsive and professional.

What did you find most impressive or unique about this company?

Most penetration testers are not nearly as thorough, they uncovered actually issues that required remediation.

Are there any areas for improvement or something they could have done differently?

They were great.

BACKGROUND

Please describe your company and your position there.

We’re on a mission to free your workforce Humans weren't meant to endlessly move pieces of data around – computers were. Automation gives human workers the freedom to pursue the creative, strategic work that builds companies, as well as their careers.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

Pen test for SOC 2 Type II

SOLUTION

How did you select this vendor and what were the deciding factors?

We were referred by our SOC 2 Type II SaaS provider

Describe the project in detail and walk through the stages of the project.

They performed penetration testing of our SaaS application and subsequent retests with guidance on remediation.

How many resources from the vendor's team worked with you, and what were their positions?

N/A

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Great service!

How effective was the workflow between your team and theirs?

Slack made it super easy!

What did you find most impressive or unique about this company?

They provided quick feedback and detailed reporting.

Are there any areas for improvement or something they could have done differently?

None!