UN1QUELY

BACKGROUND

Please describe your company and position.

I am the Product Manager of a healthcare company 

Describe what your company does in a single sentence.

Develop software to automate clinical trial research operations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Penetration Testing

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

• Pricing fit our budget
• Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

A gray box penetration test of our web assets was conducted in order to assess its risk posture and identify security issues that could negatively affect our data, systems, or reputation. The scope of the assessment covered our publicly available web application. This penetration test was a manual assessment of the security of the publicly available web application’s functionality, business logic, and vulnerabilities such as those cataloged in the OWASP Top 10.

The web application assessment also included a review of security controls and requirements listed in the OWASP Application Security Verification Standard (ASVS). The penetration testers leveraged tools to facilitate their work; however, most of the assessment involved manual analysis.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Timely delivery of the initial penetration test outcomes report. Report included information to enable timely remediation of findings. Retest was conducted immediately following our remediation of the findings and the final report was delivered prior to our SOC 2 audit.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Team members were incredible responsive via Slack and provided all deliverables for the projectin a timely manner.

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

They were really flexible in terms of the technical documentation my team was able to provide. Given that we are a small company, we do not have robust technical documentation outlining our APIs. The Uniquely team worked with a video recording and supporting documentation in order to scope our web application for the test.

Are there any areas for improvement or something UN1QUELY could have done differently?

Not at this time.

BACKGROUND

Please describe your company and your position there.

technical cofounder of the company. we're a mobile app that pays you to learn with financial literacy and partner with financial institutions to provide that service for their customers and members.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

Hired Un1Quely to complete a penetration test of our mobile application.

SOLUTION

How did you select this vendor and what were the deciding factors?

Seleted this vendor through 3rd party recommendation from our auditing system platform

Describe the project in detail and walk through the stages of the project.

Provided pentest team with information aout the application/APIs/access to postman documentation, etc. They start pen testing and provided updates and documentation on how to recreate critical problems as they found them.

Once they completed their review, they provided the full documentation of their results and let us know to tell them to retest. we resolved the issues on our side, and then asked them to re-test. We had this back and forth maybe one or two more times where we fixed issues theyf ound, then they gave us a final report.

How many resources from the vendor's team worked with you, and what were their positions?

I was the main point of contact as head of engineering. information security analyst did some correspondance.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Success - the report was good and suited our penetration test needs

How effective was the workflow between your team and theirs?

everything was effective, we created a shared slack channel and all responses were prompt

What did you find most impressive or unique about this company?

The communication was effective, their testing was pretty thorough, and the report was well made

Are there any areas for improvement or something they could have done differently?

nope

BACKGROUND

Please describe your company and your position there.

I am the Security Operations Manager for Gilded. We are a financial tech company that creates a platform for clients (organizations) and customers (individuals) to buy, trade, and sell gold.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

We have hired UN1QUELY to help build out and supplement our staff with a Security Operations professional and an Application Security expert.

SOLUTION

How did you select this vendor and what were the deciding factors?

We reviewed multiple offers from various companies for help with these 2 initiatives. UN1QUELY provided great talent, off-hours (from where we are based in the EST timezone) for a reasonable rate. It was an easy decision.

Describe the project in detail and walk through the stages of the project.

The contractors hired stood up an Application Security scanning tool and maintained it for months. They made continuous improvements and remediation to existing problems and processes. From a security operations point of view, they engage every day on Threat Hunting, project work, and other day-to-day operations.

How many resources from the vendor's team worked with you, and what were their positions?

We had 2 resources, one application security engineer, and one security operations engineer. They are knowledgeable, skilled, and consistent in their performance.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to create our day-to-day application security program, report on findings, and successfully remediate issues that were found in the operational side of the business.

How effective was the workflow between your team and theirs?

We have 2 touch points (video calls) every week and the resources check in daily to ensure they are on track and focusing on priority items.

What did you find most impressive or unique about this company?

The folks we hired are above average in their assigned roles and are amicable as well. It is easy to work with and give direction to the contractors we hired, and work is completed correctly.

Are there any areas for improvement or something they could have done differently?

We are very happy with UN1QUELY's contributions to our environment and do not have an area of improvement.

BACKGROUND

Please describe your company and your position there.

I'm running IT Security Operations for a digital healthcare SaaS company operating out of Germany and United States

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UN1QUELY?

We were looking for an external cybersecurity company to perform an external penetration test of our website and SaaS products (iOS/Android/API endpoints). Because we service the medical industry, we needed to make sure there were no potential data leaks or critical vulnerabilities.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online for cybersecurity firms with proven high quality results and senior talent and shortlisted 5. After interviewing them, we chose this vendor based on their service package and experience.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security testing of our website and mobile apps + backend, identifying potential risks in our infrastructure. They used OWASP Top 10 framework as a basis but went beyond the required scope to carry out penetration testing. After they finished, they delivered a report on all of our risks and provided a list of security recommendations. They maintained available via Slack Connect and offered free retests of identified vulnerabilities for 12 months after the report is issued. Their team was supporting ours in implementing the remediations after the engagement was over.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager, 2 penetration testers, and a QA Engineer.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify far more risks than our internal tests could, and their team is addressing those changes for us. Not only were they thorough, but they also took the time to teach us additional cybersecurity best practices.

How effective was the workflow between your team and theirs?

They kept us updated as they went through each round of testing, and their reports were easy to understand. Weekly check-ins and live chat on Slack helped us stay on schedule.

What did you find most impressive or unique about this company?

We appreciated that they offered multiple alternative solutions to suit our budget. That way, we could better prioritize how we spent our money.

Are there any areas for improvement or something they could have done differently?

Some of the testing took longer than we expected, but their in-depth process paid off in the end.

BACKGROUND

Please describe your company and position.

I am the executive of Perry Health

Describe what your company does in a single sentence.

Remote specialist for Medicare patients.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Network Pen-Test
• DAST/SAST

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We were under a crunch to complete a network pen-test and DAST/SAST within a week.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A completed network pen-test and DAST/SAST by our timelines.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We came to Uniquely with an impossible timeline. We had a huge partnership that was dependent on us completing both a network pen-test and DAST/SAST within a week. Usually, the timeline on this would be 10+ days, but Strahinja and team worked through the weekend and tirelessly to actually deliver by our timeline - we were blown away at their execution - all while being professional and an absolute pleasure to work with.

What was your primary form of communication with UN1QUELY?

Virtual Meeting

What did you find most impressive or unique about this company?

They were willing to go the extra mile and deliver what they said they would to meet our needs at extremely high quality. Strahinja and team are INCREDIBLE.

Are there any areas for improvement or something UN1QUELY could have done differently?

None whatsoever. We are incredibly happy clients.

BACKGROUND

Please describe your company and position.

I am the CTO of Kluster

Describe what your company does in a single sentence.

Revenue forecasting and analytics

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Penetration test our platform and provide a report.

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

A penetration test across our SaaS platform. Highlighting vulnerabilities and providing feedback and assistance on resolving the issues.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We reduced vulnerabilities reported from 10 (inc. 1 high) down to 3 low criticality.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The plan was laid out with timescales and everything was communicated during the test. Once our first results were back Un1quely were always on hand to help us work through our vulnerabilities and secure our app. They responded very quickly to the re-test and we worked out any issues or questions quickly

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

The communication and support. Their tester Deni was always very responsive and helpful in finding the best solutions for our team to implement. They were very professional throughout. 

Are there any areas for improvement or something UN1QUELY could have done differently?

None that I can think of

BACKGROUND

Please describe your company and position.

I am the Customer Success Leader of Thoropass

Describe what your company does in a single sentence.

We are a SaaS company that helps businesses get and stay compliant with smart software and expert services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Leveraging UN1 as a partner for our customers.

SOLUTION

How did you find UN1QUELY?

Existing Business

Why did you select UN1QUELY over others?

• High ratings
• Great culture fit
• Company values aligned

How many teammates from UN1QUELY were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

UN1QUELY acts as our partner to help our customers stay compliant by completing comprehensive penetration tests.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

UN1QUELY helped us ensure our customers have a high quality penetration testing vendor.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Superb project management. The team ensures customer deadlines are met and communication is timeley and detailed.

What was your primary form of communication with UN1QUELY?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

I was impressed by UN1QUELY's quality of work.

Are there any areas for improvement or something UN1QUELY could have done differently?

No

BACKGROUND

Please describe your company and position.

 I am the CISO of an information technology company 

Describe what your company does in a single sentence.

Fine grain access control SaaS

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Security assessment of web interface
• Security assessment of API

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration testing of our service including the web interface and API endpoints. Delivered a technical and summary reports.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Comprehensive report with well documented observations.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything performed and delivered on time. Responsive to requests and professional in communications.

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

They were competent, communicative, and professional.

Are there any areas for improvement or something UN1QUELY could have done differently?

none

BACKGROUND

Please describe your company and position.

I am the Managing Partner of Techknowledge.Cloud

Describe what your company does in a single sentence.

Our company provides transaction reconciliation services on a SaaS basis to Canadian banks. Our system is used to reconcile the transactions of many types with the bank's own system. For example, transactions from a centralized payments processor would be reconciled with the host bank's system. In this example, sample reconciliations include clearing cheque totals, pre-authorized debits and credits, cash parcels, cash shipments, charges and coins.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Find vulnerabilities
• Validate the effectiveness of our security controls
• Be able to inform our client of the state of our security controls

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

Referred to me

How many teammates from UN1QUELY were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Work assignment was to perform Black Box Penetration testing.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Received a report of their findings.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Report was delivered on time and on budget.

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

Even though we only ever communicated by email, the level of communication was excellent.

Are there any areas for improvement or something UN1QUELY could have done differently?

Nope.

BACKGROUND

Please describe your company and position.

I am the Director of IT of a financial services company

Describe what your company does in a single sentence.

Financial services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UN1QUELY to accomplish?

• Penetration Testing

SOLUTION

How did you find UN1QUELY?

Referral

Why did you select UN1QUELY over others?

Referred to me

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration Testing

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A complete penetration report.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They delivered on time and provided what we were looking for. Overall we were very satisfied with their work and impressed with their communication skills.

What was your primary form of communication with UN1QUELY?

Email or Messaging App

What did you find most impressive or unique about this company?

Communication

Are there any areas for improvement or something UN1QUELY could have done differently?

Nothing at the moment.