UnderDefense

BACKGROUND

Please describe your company and your position there.

I’m the CTO of a company offering behavioral technologies for parents’ challenges with their children. Our products instill structure and routine to provide children with organizational skills.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We needed an audit on parts of our infrastructure, as well as security monitoring and prevention. We wanted to be educated about these security skills while the UnderDefense team implemented them.

What were your goals for this project?

We wanted to ensure that there was no data leakage in our infrastructure.

SOLUTION

How did you select this vendor?

UnderDefense approached us after they did research and provided a responsible disclosure on our vulnerabilities. 

Describe the project in detail.

We began the project with multiple meetings. The first was for UnderDefense to introduce their research and solutions. They also presented a framework for navigating issues. Within this first meeting, they identified a potential security issue. The second time we met was to confirm the plan and consider suggestions. They continue to improve and maintain our security.

What was the team composition?

We primarily worked with the founder and security consultant they provided.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

After identifying the potential threat, UnderDefense successfully mitigated the issue. They provide ongoing security maintenance.

How effective was the workflow between your team and theirs?

They are great communicators; they have a clear, concise, effective style of interacting. Though we were working in different time zones, they managed to work with our schedule. We’ve been delighted with their service.

What did you find most impressive about this company?

Working with UnderDefense is an educational experience. They taught us the technical aspects and the processes related to cybersecurity.

BACKGROUND

Please describe your company and your position there.

I am the head of the information security department at a telecommunication company. A leader in B2B and B2C services, our company is the largest telecommunication organization in the country. 

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired UnderDefense to help us indentify insider threat and fraud.

What were your goals for this project?

Our goals were to establish maximum protection of our assets’ sensitive data and gain a better picture of the security and operational activity within our infrastructure.  

SOLUTION

How did you select this vendor?

We had been searching for the right security solutions and subsequent high-quality maintenance for awhile when a sales representative we worked with recommended UnderDefense. They were a knowledgeable, experienced cybersecurity provider with the right background in various security tools and systems. 

Describe the project in detail.

Both teams—ours and UnderDefense’s—first determined all the requirements necessary to complete the project quickly. In addition to explaining the behavior of our assets, they also created an anomaly detection model for future identification and response processes. 

What was the team composition?

Their team consisted of one security engineer and one lead security analyst. 

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Our understanding of operational activity has increased dramatically.

How effective was the workflow between your team and theirs?

With their open and straightforward approach during the early stages, UnderDefense knew exactly what to focus on in order to produce outcomes that were beneficial for our company now and in the long term.

What did you find most impressive about this company?

UnderDefense impressed us with their honesty and transparency. Moreover, they didn't just rush to provide us with generic security services; they learned about our challenges and goals in order to better understand where they could best protect and support us. Their expertise met our expectations and addressed our issues entirely.  

Are there any areas for improvement?

There are absolutely no areas for improvement. This has been one of our greatest experiences working with a service provider. 

BACKGROUND

Please describe your company and your position there.

I’m the CEO of Romexsoft.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We approached them to provide ethical hacking services and security consulting.

What were your goals for this project?

We’ve just migrated one of our ongoing projects to a new infrastructure and wanted to test its security.

SOLUTION

How did you select this vendor?

The company was referred to us.

Describe the project in detail.

UnderDefence performed a penetration test for the project infrastructure. After the project was completed, we received a detailed report that reflected the results of the vulnerability assessment. This included recommendations on how to increase our level of infrastructure security.

What was the team composition?

We worked with one cybersecurity specialist and a project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

UnderDefence has provided us with a detailed roadmap on the changes needed to increase the security level of our project’s infrastructure.

How effective was the workflow between your team and theirs?

Throughout the entire project (e.g., setup, execution, and feedback phases), UnderDefense ensured smooth communication and flexibility as well as a high level of responsiveness.

What did you find most impressive about this company?

In addition to their exceptional professional knowledge, I appreciated how comprehensive their report was on the security assessment.

Are there any areas for improvement?

No, we didn't experience any significant problems.

BACKGROUND

Please describe your company and your position there.

I am the CEO at Teamvoy, a software consulting and engineering firm in Ukraine.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired UnderDefense to perform a black-box security assessment of a new product we planned to release that would serve as a more efficient way for people to access their finances. We tasked them with finding vulnerabilities and conducting penetration testing.

What were your goals for this project?

Prior to our product’s launch, we needed to discover critical and high-risk issues that could potentially compromise our application or produce an unauthorized financial transaction.

SOLUTION

How did you select this vendor?

One of our trusted partners recommended UnderDefense as an experienced team of ethical hackers. We just recently started to perform penetration tests and security audits internally, but we decided to request UnderDefense as a third-party assessor to conduct it for this product.

Describe the project in detail.

UnderDefense examined our application's infrastructure and performed automated checks using the appropriate tools to discover the architecture and relation between applications. They mainly focused on analyzing the web application as a core part. UnderDefense accelerated the assessment process using their rich background knowledge and dynamic code analysis. Afterward, they provided a series of recommendations for steps to take to protect ourselves.

What was the team composition?

Two senior security penetration testers were assigned to our project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Following this security audit, we are better equipped to avoid data breaches, improve IT and security processes, and continue following security best practices.

How effective was the workflow between your team and theirs?

The UnderDefense team featured excellent communication skills. We always received a timely answer if we were facing some concerns or uncertainties. They worked well with our team in all facets.

What did you find most impressive about this company?

We found UnderDefense to be a mature and passionate company. We believe and hope they’ll be around to protect more crypto marketplaces and defend them against rising threats.

Are there any areas for improvement?

No, their work exceeded our expectations.

BACKGROUND

Please describe your company and your position there.

I’m the CEO of an Asia-based cryptocurrency company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We needed multiple cybersecurity penetration tests for our product.

What were your goals for this project?

We wanted to ensure that our product met a high security standard so we hired the team to conduct a number of penetration tests. We needed this in order to receive a detailed report that we could use to improve our product and services before the launch.

SOLUTION

How did you select this vendor?

They were recommended to us.

Describe the project in detail.

Initially, we discussed the scope and defined what areas required testing. Then, we tasked the team with using multiple methods to break the security of critical aspects of our product. They performed this task quickly and this showed us the vulnerabilities we needed to improve upon.

What was the team composition?

The team was small and consisted of three people, at most.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We immediately began to fix the vulnerabilities they exposed, which improved our coverage for future tests.

How effective was the workflow between your team and theirs?

They were very effective and worked directly with our tech team.

What did you find most impressive about this company?

Their technical abilities and the scope of their work was excellent.

Are there any areas for improvement?

In the future, there could be more documented planning surrounding the scope.

BACKGROUND

Please describe your company and your position there.

I am the head of IT for a company that provides software engineering, IT, and consultancy services. We have offices in four different countries, with over 500 employees globally.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired them to help us with incident analysis, detection, and response. We needed to build an incident response (IR) plan.

What were your goals for this project?

wanted to be ready to fight cyberattacks and detect anomalies in the Amazon b Services environment.

SOLUTION

How did you select this vendor?

received a referral from a close friend.

Describe the project in detail.

UnderDefense guided us through the first steps of risk management. Initially, we collected logs from our Amazon account. Then, their analysts helped us build an IR plan and process policies playbooks. Using common exercises, we could analyze an entire activity, conduct forensics, and analyze logs.

What was the team composition?

We worked with two IR analysts.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We had a fruitful collaboration. Thanks to UnderDefense, the people in our company are more aware of the cyberthreats and risks. We are now ready to investigate and respond to cybersecurity incidents.

How effective was the workflow between your team and theirs?

UnderDefense’s engineers communicated effectively with our employees and did a great job of training them. They provided excellent support.

What did you find most impressive about this company?

They were great communicators and assiduous workers who strived to deliver perfect results.

BACKGROUND

Please describe your company and your position there.

I’m director and founder of Kyte. We conduct IT audits within the gaming, financial technologies, and cryptocurrency industries.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We needed help developing an incident response training program for our staff and clients.

What were your goals for this project?

We needed a partner with the expertise and knowledge to train our staff and clients in Information Security practices, especially detecting and responding to incidents.

SOLUTION

How did you select this vendor?

UnderDefense was introduced to us by a partner. They came highly recommended.

Describe the project in detail.

They created a presentation that could be converted to an e-learning unit. They also provided the entire script of the training program.

What was the team composition?

Two security engineers were assigned to the project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The incident response training has been successfully included in our suite of training programs on our e-learning platform. Clients were happy with the content and said it provided good insights.

How effective was the workflow between your team and theirs?

Communication was efficient. We typically relied on email to stay in touch.

What did you find most impressive about this company?

They delivered the exact resources that were required for the project and delivered them on time.

Are there any areas for improvement?

No. The project was straight forward, and the deliverable was received as expected.

BACKGROUND

Please describe your company and your position there.

I’m the VP of engineering at LEO Cyber Security. We provide vCISO and cybersecurity monitoring programs.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We approached UnderDefense for multiple projects, spanning web, Python, PowerShell, Bash, and virtual appliance development.

What were your goals for this project?

We wanted resources who could deliver a practically applicable, extensible, and supportable solution for our customers’ needs.

SOLUTION

How did you select this vendor?

It was imperative for us to find a vendor that could execute and think independently. We required an agency that would push back with their own ideas, not one that would only deliver exactly what was asked. They needed to think outside of our box by applying their own cybersecurity experience to the projects.

Can you go into detail about the services they provided and the scope of the project?

Due to our organic nature, scope and requirements often evolve quickly. The personnel assigned have always been flexible, responding well to a fast-paced environment.

What was the team composition?

The team changed depending on the project’s technical requirements. However, we usually worked with at least two people.

RESULTS & FEEDBACK

Can you share any information that demonstrates the impact that this project has had on your business?

We viewed them as an extension of our internal team. They helped us deliver solutions quicker and in a more comprehensive manner than we could have on our own. The relationship has been excellent, and we highly value their contributions.

How was project management arranged and how effective was it?

In most of our projects, we shared the project management. UunderDefense worked well to accommodate changing customer requirements due to shifting circumstances.

What did you find most impressive about this company?

I strongly value their willingness to push back against ideas they see as incomplete or lacking in any way. They were always willing to offer ideas for improvement. They went above and beyond what was asked and showed strong ownership of the work we gave to them. I can't stress the value of that quality enough.

Are there any areas where they can improve?

No, nothing comes to mind. Any issues we ran into were due to how busy my internal team was and not communicating enough. Despite that, UnderDefense worked through these challenges very well.

BACKGROUND

Please describe your company and your position there.

I am the CTO of a financial technologies startup. We are building a product called FirstHomeCoach, which guides users through the entire process of buying a house. Step by step, we help clients figure out how much they can afford and all the costs involved in buying their dream home. Our trusted advisers can assist with things like mortgage, insurance, and legal paperwork. The great thing about the app is that the whole journey is personalized. Plus, it’s completely free.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired UnderDefense to design our security, check it had been implemented correctly, and then perform a security audit.

What were your goals for this project?

Since our product stores personal data, its infrastructure needed to be secure.

SOLUTION

How did you select this vendor?

The outsourced development house we used to build the product had worked with UnderDefense before and recommended them. I reviewed them based on my previous experience with other security firms.

Describe the project in detail.

UnderDefense was involved in the project from the beginning, helping design the overall architecture and recommending solutions. They also validated that the build matched the design and then completed an external audit of the systems. They will continue to work on the project as our security consultant.

What was the team composition?

Initially, we worked with a senior security architect. Later, two security engineers conducted the audit.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Within three months, we had built a prototype of the system that enabled us to move forward with the main build.

How effective was the workflow between your team and theirs?

The UnderDefense people integrated themselves well with our development team. They provided practical solutions with the right amount of advice and control. Our communication was good and fast.

What did you find most impressive about this company?

We were impressed with their knowledge of the subject matter.

Are there any areas for improvement?

There is always room to improve, but no specific areas spring to mind.

BACKGROUND

Introduce your business and what you do there.

I’m the co-founder and CTO of YayPay. We’re a software as a service (SaaS) provider of a cloud-based solution that leverages machine learning and automatic payment communications to accelerate collections.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with UnderDefense?

I was looking for a firm that could provide services related to data privacy and security. We needed a consultant to help us set up a secure development process that’s compatible with our software.

SOLUTION

What was the scope of their involvement?

UnderDefense helps us with all tasks related to application security. This includes application and infrastructure penetration testing. They hold workshops to train our engineers in cybersecurity and compliance. Working collaboratively with our development team, they established proper security practices and tools. The software tools include vulnerability scanners, file system integrity scanners, and security logins. The security policies they put together detail concepts like risk assessment, vulnerability, vulnerability management, and password strength. Currently, they monitor our system and respond to cybersecurity incidents.

What is the team composition?

Their project manager oversees most of the activities that take place within our system. He’s the contact that communicates with my team. Beyond that, they allocate different groups of engineers as needed. For example, they assigned four engineers during penetration testing.

How did you come to work with UnderDefense?

I was introduced to them by one of our investors. They came highly recommended to us.

How much have you invested with them?

We spent $40,000 thus far.

What is the status of this engagement?

We started working together in May 2017 and the engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Our compliance officer noted our systems and processes as one of the more advanced ones for the companies at our stage. That couldn’t have been achieved without the help of UnderDefense. Their presence makes me and my team feel comfortable from a security perspective. It’s nice to know we have someone to rely on if anything goes wrong.

How did UnderDefense perform from a project management standpoint?

I have no complaints regarding communication. We interact via email, Slack, and Zoom.

What did you find most impressive about them?

They’re productive and never wait until we ask them to do something. They proactively reach out to us about topics that require our attention. We have a complicated app and their team knows it inside and out. This understating informs where they search for potential problems.

Are there any areas they could improve?

They need to keep growing their team and increase their availability. Overall, they’re doing an excellent job.

Do you have any advice for potential customers?

I highly recommend establishing clear expectations from the start. Make sure both sides can provide what the project requires.