Vumetric

BACKGROUND

Please describe your company and your position there.

I was project manager for City of Montreal

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity, and what were your goals?

We are developing a mobile application to interface with the central database. We needed to perform Intrusion testing to deploy the application in production.

SOLUTION

How did you select this vendor and what were the deciding factors?

Your firm acted as a subcontractor for the company that had the contract with us.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

The Intrusion tests, the report associated with the tests as well as a live presentation were the required deliverables.

How many resources from the vendor's team worked with you, and what were their positions?

A project manager and a security testing specialist

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

the Application being in the process of being deployed, the expected results have not yet been achieved!

Describe their project management style, including communication tools and timeliness.

It was a project, with your team, relatively short (2 weeks) Communication was simple, by email and by videoconference.

What did you find most impressive or unique about this company?

I liked their professionalism, experience, and good communication.

Are there any areas for improvement or something they could have done differently?

No, everything was ok

BACKGROUND

Please describe your company and your position there.

I am the owner of a smartparcel locker company. We sell, install and manage a network of smartparcel lockers optimizing parcel delivery.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

We were looking for an external cybersecurity company to perform a penetration test on our new infrastructure to be sure our system is secure for our clients.

SOLUTION

How did you select this vendor and what were the deciding factors?

A partner of us recommended Vumetric as a great partner for this kind of project.

Describe the project in detail and walk through the stages of the project.

They performed a thorough penetration test on our website, our cloud infrastructure and our API during one full week. They scanned our system for vunerabilities and made some organized localized attacks to our system.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager and 1 security analyst and 1 penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The outcom was a well documented report with all the test done, their comments and recommendations, ainsi the list of vulnerabilities they have found.

How effective was the workflow between your team and theirs?

Everything was done in time and the team was amazing.

What did you find most impressive or unique about this company?

We really like the speed and the quality of the report they produce. They do it in a human way making it accessible and interesting.

Are there any areas for improvement or something they could have done differently?

Nope.

BACKGROUND

Please describe your company and your position there.

CTO at LendStreet Financial

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

Black box pend testing and AWS infrastructure review.

SOLUTION

How did you select this vendor and what were the deciding factors?

Spoke to several vendors and felt comfortable with Vumetric.

Describe the project in detail and walk through the stages of the project.

We contracted with Vumetric for Black box pend testing and AWS infrastructure review.

How many resources from the vendor's team worked with you, and what were their positions?

Sam Puma was my primary contract. I believe there was a team behind this effort.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

With their help we were able to solidify our security posture.

How effective was the workflow between your team and theirs?

Vey cordial and easy.

What did you find most impressive or unique about this company?

Cost, value of their services, report.

Are there any areas for improvement or something they could have done differently?

I would contract them again for my future needs.

BACKGROUND

Please describe your company and your position there.

I'm the operations manager for the main office in Montreal, I oversee parts of IT, Admin, HR.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

We were looking to have an external partner to audit our system and see from an outside perspective our weakness to prevent our company to be the next one that will get ransomware'd.

SOLUTION

How did you select this vendor and what were the deciding factors?

Our current IT partner did suggest Vumetric.

Describe the project in detail and walk through the stages of the project.

They performed a clean and complete audit of our risk.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We fixed most of the findings, we are now in a better security position.

How effective was the workflow between your team and theirs?

Super quick, super collaborative.

What did you find most impressive or unique about this company?

The speed of the project completion and the end report.

Are there any areas for improvement or something they could have done differently?

Everything was as expected and more. Their team was great and very knowledgeable.

BACKGROUND

Please describe your company and your position there.

WWF-Canada is a conservation organization working in the areas of wildlife, nature and people. I am the Sr. IT Manager leading technical infrastructure and cybersecurity projects.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

We hired Vumetric to conduct the penetration test for our internal networks and internet-facing networks.

SOLUTION

How did you select this vendor and what were the deciding factors?

We considered the factors:

1. Technical experience in cybersecurity area
2. Working experience with nonprofit
3. Well-managed project team
4. Cost friendly

Describe the project in detail and walk through the stages of the project.

For LAN side, we tested 6 subnets which are on-net, all the devices (servers, network appliances, UPS) are included. For laptops we only have office laptops scanned. For Internet-facing network, we tested all public IPs we are using.

How many resources from the vendor's team worked with you, and what were their positions?

• 2 Engineers
• 1 project manager

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Two levels of report generated for us, one is detailed results, another one is the executive summary. We also got the quick result for critical findings immediately after the scanning the networks. This helped us to address the issue promptly

How effective was the workflow between your team and theirs?

We worked with each other very well, both teams coordinated by email and phone. We had the weekly update.

What did you find most impressive or unique about this company?

Skilled engineers, they provided detailed mitigate to help customer like us.

Are there any areas for improvement or something they could have done differently?

hopefully they will have better executive report session to explain the findings using non-tech terminologies.

BACKGROUND

Please describe your company and your position there.

I am the Director of IT and CISO for our organization

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

Perform external penetration testing to determine the strength of our IT perimeter and degree of risk from external hacking.

SOLUTION

How did you select this vendor and what were the deciding factors?

Recommended by our MSP.

Describe the project in detail and walk through the stages of the project.

They performed automated and manual security testing of all externally accessible systems within the defined project scope. The tests leveraged internationally renowned methodologies such as the Penetration Testing Execution Standard (PTES) and the Open-Source Security Testing Methodology Manual (OSSTMM), as well as the Vumetric security assessment methodology.

How many resources from the vendor's team worked with you, and what were their positions?

• Sam P., Cybersecurity Account Manager
• Catherine D-A., Customer Experience Coordinator
• Alex C., Cybersecurity Analyst

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

No significant vulnerabilities requiring escalation have been identified. Several minor vulnerabilities were identified which were remediated immediately with one remaining and remediation a work in progress.

How effective was the workflow between your team and theirs?

They met our timeline for starting and ending the testing and kept us updated throughout the testing process. Their presentation of findings and recommendations was engaging and effective. Their report of findings and recommendations was easy to understand.

What did you find most impressive or unique about this company?

They were professional, knowledgeable, and transparent throughout.

Are there any areas for improvement or something they could have done differently?

Nothing to note.

BACKGROUND

Please describe your company and your position there.

I am the owner of a SAAS based transaction processing and Document Conversion Service companya

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

External and Internal penetration testing of our infrastructure as we handle consumer oriented information that is timely and in many cases, private and confidential.

SOLUTION

How did you select this vendor and what were the deciding factors?

We worked with Vumetric in 2021 and were fully satisfied with their services and recommendations

Describe the project in detail and walk through the stages of the project.

Vumetric performed extensive external penetration testing on our environment and then internal testing on our infrastructure to provide us potential issues and remediation that may be helpful to attain SOC2 compliance

How many resources from the vendor's team worked with you, and what were their positions?

We had one manager and two technical resources from Vumetric that worked with our team

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

A full report of their findings from the internal and external penetration tests were provided as well as a report detailing 7 remediation items that were highly suggested.

How effective was the workflow between your team and theirs?

Communication was constant and Vumetric met all the milestones they detailed in the quotation.

What did you find most impressive or unique about this company?

They were very professional and very friendly to work with. Good communication and detailed information provided in both the quotation and the detailed reports provided.

Are there any areas for improvement or something they could have done differently?

At this time, I am very comfortable to recommend Vumetric and will probably continue to utilize their services

BACKGROUND

Please describe your company and your position there.

IT Manager

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

External Pen Testing evaluation, reporting and recommendations

SOLUTION

How did you select this vendor and what were the deciding factors?

Well known canadian company

Describe the project in detail and walk through the stages of the project.

They performed a thorough external pen testing audit, answered all of our question and finished with an excellent report.

How many resources from the vendor's team worked with you, and what were their positions?

• A project manager
• 1 security analyst
• 1 pen tester

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify low and high risks and provided clear details and solutions.

How effective was the workflow between your team and theirs?

Excellent

What did you find most impressive or unique about this company?

Great prioritization

Are there any areas for improvement or something they could have done differently?

Not that I can think of.

BACKGROUND

Please describe your company and your position there.

I oversee the development of Axonify's training platform. We help organizations offer better training to their employees, with an entirely new digital approach.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

We were ask to perform a penetration test or a security audit to comply with security requirements of a strategic business partner. They requested an entire security review of our application.

SOLUTION

How did you select this vendor and what were the deciding factors?

We initially reached out to 4 different canadian providers. They all offered similar pricing and methodology, but this provider provided more documentation on the checks they performed and had a mix of manual and automated testing.

Describe the project in detail and walk through the stages of the project.

I called them in mid-October and we set a meeting for the next day to discuss our requirements with management. We had a quote the following week, before others even had the chance to call back. We signed the deal early November and we had a short call to launch the project a few days later. During the project, someone reached out to inform a critical vulnerability had been found. The employee provided a document that helped our developers fix this vulnerability. We received a report early December with many things to fix. When we finalized the fixes, they tested our application once again. The overall process took about a month, which is a bit longer than we initially expected.

How many resources from the vendor's team worked with you, and what were their positions?

I worked with 2 different employees, one who was more in "sales/customer relations" and the other was our project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They found multiple vulnerabilities, but only a few critical. We showed the provider's documentation to our business partner and were able to successfully comply.

How effective was the workflow between your team and theirs?

Hard to tell, as we did not need to communicate much, other than the escalation notice that was sent during the project.

What did you find most impressive or unique about this company?

They found vulnerabilities we thought were impossible to hack and even found ways to manipulate features in our application in ways that we hadn't seen before. The final document we were sent was incredibly detailed, so much that we haven't had the chance to implement everything they recommended.

We felt like they were very transparent throughout the process, and our project manager was down-to-earth. They were not afraid to say things as blunt as they are. I felt like they acted as a partner more than a service provider. In the final call where they presented the report, their consultant took the time to answer every questions we had and even brought in a specialist on the call to break down some findings.

Are there any areas for improvement or something they could have done differently?

I wish they could make some of the fixes they recommended so we can focus our time on development. Also wish we had a more detailed schedule of what was happening throughout the project, just to better follow progress. Other than the escalation notice for a critical vulnerability, we had no idea if they were even doing their job .