Virtue Security

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a national healthcare provider that brings medicare benefits to individuals.

OPPORTUNITY / CHALLENGE

What challenges were you trying to address with Virtue Security?

We needed help with pen testing for our company.

SOLUTION

What was the scope of their involvement?

Virtue Security provided penetration testing services for our complete application stack. For this project, the team did a full pen test of our therapy rewards platform, looking for vulnerabilities in our software and architecture.

For this process, the team interviewed us to learn about our system's organization, platforms, users, and modalities. These tasks enabled them to get a broad picture of our technology stack and product to provide a tailored solution to our needs rather than just having an automated script.

Moreover, the team reviewed our AWS architecture and configuration settings.

What was the team composition? 

I worked directly with Elliot (CEO).

How did you come to work with Virtue Security?

I met Elliot and his team in a previous project for a different company where we worked together. We chose them for this project because, instead of performing an automated test, they actually interviewed us and our application team to understand the nature of our product through architecture questions.

How much have you invested with them?

For this project, we spent $16,000 with them.

What is the status of this engagement?

We worked together from June–December 2023.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Virtue Security’s team consistently provided reports highlighting our types of vulnerabilities to address and retest them to ensure the issues were correctly resolved. The team also provided reading material for us to describe our vulnerabilities clearly.

How did Virtue Security perform from a project management standpoint?

Virtue Security delivered the work on time and within budget and communicated well with us. Regarding tools, we used email and phone calls.

What did you find most impressive about them?

Virtue Security's work was of high quality, and their reports were descriptive and accurate, which made a difference between them and provided that would just point out our potential leaks without letting us know how to solve them.

Are there any areas they could improve?

I didn’t think there was anything they could improve on.

Do you have any advice for potential customers?

Have a good understanding of your architecture and product so you can clearly articulate the system's intricacies; this will allow them to correctly focus on the area they need to test and address.

BACKGROUND

Please describe your company and your position there.

The Bosco provides photo & video activations for brands & events. In 2020, we pivoted to developing web experiences from scratch. I am the Director of client services.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Virtue Security?

We've used Virtue in the past and they did a great job looking into a dense backend that we created which hosted & stored assets and information from all of our booth applications. For this project, we hired them back to perform a PEN test on a website that we created which hosted a virtual event for a client.

What were your goals for this project?

To perform a PEN test that would prove to our client that the site had little, or no, vulnerabilities and that we'd be able to securely host a virtual event that would collect personal information and host private/exclusive content.

SOLUTION

How did you select Virtue Security?

My team used Virtue the year prior on another project. The team highly recommended using Virtue again for this one.

Describe the project in detail.

Our client in the film & entertainment industry wanted to hire us to host a virtual premiere which would host a film that has yet to be distributed to the public. The content was considered highly sensitive and we needed to provide the client with a PEN test before the premiere that would prove there were no red flags in terms of sucurity. Virtue performed the PEN test and provided a report with detailed findings.

What was the team composition?

We worked directly with Elliott and was able to explain the project, the ask and walk him through what environments Virtue would need to test. From there, his team ran the test and he delivered the report in a timely manner.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

It was a pretty tight turnaround, but Virtue was extremely flexible and was able to perform the test without cutting any corners, but with the timeline that was given.

The report was received on the anticipated date and our client found it to be adequate and we were able to move forward with the virtual premiere.

How effective was the workflow between your team and theirs?

Extremely effective. We had a few people on our team speak to the needs and Elliott was able to be flexible in working with us to outline what was needed and how they would execute on the project.

What did you find most impressive about this company?

Security and PEN tests don't have to be that daunting. It seems like a huge thing and Elliott made it easy all the way through - from each conversation to negotiations to the final report.

Are there any areas for improvement?

I can't think of any at this time. We'll continue to work with Virtue when opportunities come up.

BACKGROUND

Please describe your company and your position there.

We're an international shipping carrier and I am the CTO there.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Virtue Security?

We needed them to complete a network penetration test with a short turnaround time and they managed to deliver it on time and gave some good advice.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online and contacted a few companies for proposals. At the end the deciding factors were responsiveness, turnaround time, and price.

Describe the project in detail and walk through the stages of the project.

They performed a network penetration test on our servers and found some risk, which we quickly patched thanks to their findings.

How many resources from the vendor's team worked with you, and what were their positions?

We worked directly with Elliott the CEO.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They found a few low level risks which we promptly patched.

How effective was the workflow between your team and theirs?

Very effective

What did you find most impressive or unique about this company?

They executed in a quick turnaround time and a consultative approach, rather than trying to sell us something.

Are there any areas for improvement or something they could have done differently?

Nothing comes to mind at the moment