Vumetric

BACKGROUND

Introduce your business and what you do there.

I am the IT Infrastructure and Cybersecurity manager for the Insurance Council of British Columbia.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity?

We needed assistance with penetration testing, which we had never done before, so we engaged Vumetric.

SOLUTION

What was the scope of their involvement?

Vumetric conducted external vulnerability tests, internal infrastructure tests, and network vulnerability tests. They also ran phishing email simulations for us, and then we met to discuss their findings. They provided offsite services, and we are considering partnering with them for maintenance needs in the future. 

What is the team composition?

We worked with roughly five people, including a project coordinator, three cybersecurity engineers, and a security lead. 

How did you come to work with Vumetric Cybersecurity?

We found Vumetric on Google.

How much have you invested with them?

We invested roughly $25,000 CAD (approximately $19,000 USD).

What is the status of this engagement?

We began working with Vumetric in June 2022, and they submitted their results in July 2022.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

Vumetric provided us with excellent service. If I were to rate them on a scale of 1–10, I would give them a 10. They performed assessments promptly and gave us immediate results concerning critical findings.

How did Vumetric Cybersecurity perform from a project management standpoint?

Vumetric was accurate when it came to managing the project. They gave us a detailed project outline and description and completed the project within the allotted timeline and budget. We used Excel to manage the project and communicated via Microsoft Teams.

What did you find most impressive about them?

The Vumetric team is very skilled and knowledgeable. They also have an excellent reputation, which sets them apart from competitors. Additionally, they have excellent customer service, and we were impressed by their pricing. 

Are there any areas they could improve?

I have nothing Vumetric could improve on.

Do you have any advice for potential customers?

I advise communicating requirements at the beginning of the project so you can get the most out of Vumetric’s services. Provide them with as much information as possible so that they can perform tests to the best of their ability.

BACKGROUND

Introduce your business and what you do there.

I’m the director of infrastructure at Viamo, a mobile communication company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity?

Most of our business is built around a platform hosted in AWS, and we frequently need a third party to assess our security.

SOLUTION

What was the scope of their involvement?

Vumetric has done penetration testing for us. First, they had a discovery phase to understand our process and needs. They created a scope of work and provided us with a quote. The team has tested our platform to find security weaknesses and provide recommendations on how to improve our security setup. They’ve provided a detailed report specifying which issues are critical, which are moderate, and which are the least critical. For each weakness, they’ve given proof and recommendations for best practices. 

After they presented the report, I had in-depth questions about a couple of issues, and the Vumetric put me in contact with a specialist who has provided consultancy services for us. The next step is for us to provide them with an acceptance of their report.

What is the team composition?

At first, I worked with two people from Vumetric’s sales team. Now, we have one person who’s our point of contact, and I’ve also worked with a specialist.

How did you come to work with Vumetric Cybersecurity?

I contacted many companies to get a sense of a price and process that would fit our needs. When I talked to Vumetric, they were willing to listen and come up with something that would work for us, so they were the best match, and we hired them for a trial. 

How much have you invested with them?

We’ve spent between $7000–$8,000 CAD (approximately $5,400–$6,100 USD). 

What is the status of this engagement?

We started working together around December 2021, and the engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

I appreciate how Vumetric understands our platform and doesn’t waste time. Our primary metric is how much back and forth is required for them to understand our platform and for us to understand their report. With other companies, I’ve had to explain the most basic things. Meanwhile, Vumetric was super fast in understanding all our documentation. Additionally, their report is very well-written, and they’ve provided proof for every item.

How did Vumetric Cybersecurity perform from a project management standpoint?

They’re good at project management; I don’t have any complaints. We’ve taken a long time to provide them with the report acceptance, and they’ve been very patient with us. I also appreciate that they use a secure platform to transfer the report since it’s very sensitive information. We communicate via email and Google Meet.

What did you find most impressive about them?

I’m most impressed by the quality of Vumetric’s reports.

Are there any areas they could improve?

I can’t think of anything they need to improve; I’m quite happy with what they’ve done. 

Do you have any advice for potential customers?

Establish the process from the beginning, and don’t be afraid to tell Vumetric what works for you — they’ll listen to you.

BACKGROUND

Please describe your company and your position there.

I am IT manager for my company, and one of my responsibilities is smooth functioning of all IT infrastructure and systems.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Vumetric Cybersecurity?

We were looking for an external cybersecurity company to perform an annual security audit of our website and firewall. Because we are a part of an automotive supply chain, we must ensure there are no interruptions caused by deficiencies in cybersecurity.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online, sorted out 4 companies, and selected this one based on their reputation, experience and the price.

Describe the project in detail and walk through the stages of the project.

They performed a security audit of our website and externally exposed firewall ports. Upon completion, they delivered a comprehensive report on all of the vulnerabilities and provided a list of security recommendations.

How many resources from the vendor's team worked with you, and what were their positions?

We had a customer experience coordinator and a security analyst.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify more risks than we could think of, and proposed straightforward solutions for them.

How effective was the workflow between your team and theirs?

They kept us updated, completed their job within mutually agreed timeframe and their report was easy to read and understand.

What did you find most impressive or unique about this company?

We appreciate that they offered multiple alternative solutions to suit our budget, allowing us to prioritize how we spent our money

Are there any areas for improvement or something they could have done differently?

They did everything as expected, so we did not notice any areas that would need an improvement.

BACKGROUND

Introduce your business and what you do there.

I’m the project manager for an HR agency.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity?

We have a big application and needed help with cybersecurity testing. We used a different company before, but they were expensive and their services weren’t good. In addition, the report we received from the previous company wasn’t simple to understand — it didn’t have the proposition to resolve the problem.

SOLUTION

What was the scope of their involvement?

Vumetric Cybersecurity does cybersecurity tests for us. So far, they’ve proposed a solution, and they’ve been able to report any vulnerabilities that we have. We’ve also received a big report from them and we’ve been able to discuss the changes we need to make through a meeting.

What is the team composition?

At first, we worked with a general manager and a specialist. Later on, we began to collaborate with a customer success manager, a senior specialist, and another specialist. Our main point of contact is the customer success manager, and she helped us define the project.

How did you come to work with Vumetric Cybersecurity?

We found them on Google. We had a conversation and decided to work with them.

How much have you invested with them?

We’ve spent less than $10,000.

What is the status of this engagement?

We started working together in October 2021, and we continue to collaborate.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

The reports we’re receiving from them have been good because it shows exactly what we need to improve in our app and it has a good structure. We also appreciate that they explain the problem first before presenting the solution. Their services have been great, and everything that they do is very secure. Overall, we’re happy with their work.

How did Vumetric Cybersecurity perform from a project management standpoint?

Their project management process is good. On top of that, Vumetric Cybersecurity speaks clearly and explains things well; I always understand what they tell me. In addition, they’re very professional. We communicate through phone calls, email, Microsoft Teams, and Google Meet. 

What did you find most impressive about them?

They offer a reasonable cost for their services, and they deliver quickly.

Do you have any advice for potential customers?

They help you manage your project.

BACKGROUND

Introduce your business and what you do there.

We’re a pharmaceutical testing company that services the top 10 pharma companies worldwide.

I’m the director of compliance and information services, and I’m in charge of all the equipment that we use for the actual testing of our drug products, as well as all the IT infrastructure.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity?

We house a lot of our data in-house and we wanted to make sure that our infrastructure is secure, leaving no possibility of anybody trying to get in.

We've got firewalls in place and certain other services that we run in the background for viruses, malware, and everything else. 

However, we still needed an extra sense of security to make sure that everything is working correctly given the current political climate. If we’re infiltrated, we want to make sure that we’re aware of any possible exposures that could be vulnerable to outside attacks.

SOLUTION

What was the scope of their involvement?

We hired Vumetric Cybersecurity to check the internal and external penetration testing to make sure that all of our firewalls and everything else is in place and to mitigate any potential cybersecurity threats.

The firewalls and VPNs were already configured in our system, but they made sure to set it up correctly to prevent any potential loopholes or vulnerabilities.

They initially informed us that there were some ports that were possibly exposed, so we closed them up and tightened up other security issues — we’ve also got some other feedback from them to help alleviate any threats.

To do the internal penetration tests, they set up a server on one of our computers internally and did the testing on our systems. Apart from that, they checked our email to ensure that our 170 employees didn’t click on anything suspicious, and give us a better understanding of their activities.

What is the team composition?

There were three people involved, including two IT specialists to help set up our system.

How did you come to work with Vumetric Cybersecurity?

I looked around and found about five companies that did the same thing as Vumetric. I got some information online and talked to all the other parties, who were trying to sell me products to improve my system.

Vumetric Cybersecurity was more hands-off and gave me the impression that they would do the actual testing because they already offered the services we were looking for.

We went to Vumetric because they had competitive pricing, and they didn’t try to sell me anything, but instead focused on offering me their diverse services.

How much have you invested with them?

We spent between $13,000 – $15,000 CAD (approximately $10,300–$11,900 USD) on their services, which was quite reasonable. 

What is the status of this engagement?

We reached out to them towards the end of December 2021 and started collaborating together around mid-January.

It took them about seven days to complete all the internal and external penetration testing and email testing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

Vumetric Cybersecurity executed all the work and gave me a full report of my shortcomings, including any issues and what I can do to mitigate them. We set up a meeting with three people from my company, including my bosses, and we went through each one of those possible issues and what we can do to resolve them.

We were quite happy with the results and with what they found. We’re now almost halfway through fixing our issues and prioritizing anything of high risk. Apart from that, we actually found that we didn’t really have any critical risks, but did have a couple of highs, a few moderates, and several low ones for both internal and external testing.

How did Vumetric Cybersecurity perform from a project management standpoint?

They were excellent from a project management standpoint. Once they had the green light, they told us to get together on a specified date. They kept us informed during the whole testing process told us what they’d be doing every step of the way.

We initially spoke over phone calls but afterward, we just exchanged emails back and forth between three of their people and three of mine.

What did you find most impressive about them?

We were impressed with their personnel and their consistent communication. Furthermore, they also offered their help for anything we may need in the future.

I will possibly be using them again sometime later this year for another penetration test to make sure we rectify all our shortcomings.

Are there any areas they could improve?

There was nothing they needed to improve on because I was impressed with their staff and services — there were no delays and everything went smoothly.

Do you have any advice for potential customers?

To get the most out of the engagement, I recommend you keep your communications open. They sat down with me to get all our information and gave me a thorough quote and in the end, I was comfortable with what they were going got be doing, and everything followed suit during the process — my boss and I were happy with the results. It was a win for us and hopefully for Vumetric as well.

BACKGROUND

Introduce your business and what you do there.

I’m the technical lead for the zoning system operations at Transurban Group. 

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity? 

We’ve hired Vumetric for various reasons. The first one is the yearly penetration test required for PCI compliance. Then, we’ve also asked them to further test and assess the security of our website’s API.

SOLUTION

What was the scope of their involvement?

Initially, we reached out to Vumetric and shared information about our business and network. We supplemented that with documentation describing our IT structure. The goal was for them to conduct internal and external IP testing for us. Then, when the work was started, we provided them with access to our internal network via a VPN. when then provided them with workstations where they could access the tools necessary to do all the testings. 

Once all of those were set up, they started the internal and external penetration tests. Afterward, the team provided us with an executive report of the results. The report detailed their findings and all the vulnerabilities they found. We used that report as a working document to improve our network security.

At present, we’ve engaged them for a three-year contract to do penetration tests for us over the coming years. The next penetration test is in June–July 2022. 

What is the team composition?

Our first main point of contact was Felix (Customer Success Manager), but we’ve since switched to Ken (Account Manager), who handles our three-year contract with Vumetric. 

How did you come to work with Vumetric Cybersecurity?

I found Vumetric through Google. For context, we dealt with a different company in Alberta, Canada. When we tried to engage them, we had some problems; they were difficult to hire during the post-COVID-19 pandemic era. As a result, I went ahead and researched companies. I was looking for a company based in Quebec, Canada — we always tried to engage local businesses — and then we found Vumetric. 

As part of our due diligence process, we contacted them. They then provided us with a quote. After surveying 2–3 other vendors, we decided to go with Vumetric because of their professionalism and proposal. They also had a good price. 

How much have you invested with them?

We’ve invested around $46,000. As a breakdown of that, we’ve spent around $10,000 on the penetration test and another $10,000 on other tests. Then, the three-year contract we’ve signed costs around $26,000. 

What is the status of this engagement?

Vumetric did the first penetration test in June 2021, but we established the three-year contract in January 2022. We intend to keep using their services in the future if everything goes well. 

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

We measure success based on several things. First, we’ve been able to address internal issues on our website. The site’s external portion is fairly secure, but the internal network has had issues. We’ve used the document that Vumetric presented to establish a remediation plan with our network team. We’ve started tackling their findings; we hope to have solved the issues once we do penetration testing again. 

Meanwhile, with the intervention of Vumetric, we’ve also identified a few vulnerabilities in our API. During the tests, we’ve had 3–4 cards — we’ve been able to correct these and reduce them down to zero.  

How did Vumetric Cybersecurity perform from a project management standpoint?

We normally communicate through email. Our teams have also had a couple of meetings. The Vumetric team has also been responsive; they get back to us within a business day or two. The reports they’ve done have also been on time. 

What did you find most impressive about them?

Vumetric facilitates business well. The other security companies we’ve worked with in the past have been highly technical, but they don’t have good management — account management isn’t the strength of those companies. They’re so focused on the technical aspects of the project that they leave the development of client relationships behind.  

By contrast, Vumetric has managed both the technical aspects of the project and our relationship at the same level. In other words, they have good technical people and good account managers. Others have great technicians, but they don’t have a clue on how to deal with their customers.

Are there any areas they could improve?

They can improve the clarity of their reports for non-technical people. This isn’t a problem for me, but other people might not understand the reports. On top of that, they can also follow up more with us in terms of API testing. Doing follow-ups can also help them generate more business. 

Do you have any advice for potential customers?

Vumetric is a solid company in every aspect, so expect to be served well. Work with them and provide the information that they need to do their jobs correctly. If you give them the details they need, they’ll do a good job.

BACKGROUND

Introduce your business and what you do there.

I’m the compliance and process improvement manager of a cloud-based healthcare IT company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity?

We needed to identify if there were any vulnerabilities in our network or web applications that would allow anyone to access or systems or information.

SOLUTION

What was the scope of their involvement?

They provide off-site penetration testing. We’ve installed all the fixes to address the issues they found, and then they’ll do a retest.

What is the team composition?

I worked with five people from their team, including a customer success manager, Sam.

How did you come to work with Vumetric Cybersecurity?

They were recommended to us by one of our other vendors. After the quoting process, we evaluated what our needs were and whether they could meet them. there’s a rigorous process we put the potential vendors through, and Vumetric won out over 11 others.  

How much have you invested with them?

We’ve spent around $25,000–$30,000.

What is the status of this engagement?

We’ve been working together since January 2022. I need to reach out to validate the fixes we put in place.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

We measured their work in a few ways. We have automated tools that scan our system for vulnerabilities, and if Vumetric’s work matches up perfectly with that tool’s results, then the engagement wouldn’t be worthwhile, as we wouldn’t have needed to hire them. Vumetric did find new issues, however, and our internal developers validated those findings as legitimate concerns.

How did Vumetric Cybersecurity perform from a project management standpoint?

They’ve done very well in this regard. There’s little doubt that we’ll continue this relationship into a multi-year endeavor.

We communicate over email and Microsoft Teams.

They used a website to send us their findings in a secure way, but it’s not a project management tool. We use it on our side to input tickets for our developers to work on the findings.

What did you find most impressive about them?

Much of their team is certified in many areas — close to every area you can be certified in. They came highly recommended and were personable in our introductory calls. They asked questions that a lot of other vendors did not, which we really appreciated, causing us to rethink exactly what we wanted.

Some companies put together quotes based on pre-established tiers, but Vumetric went into our network, investigated our application, and put together a legitimate quote.

Are there any areas they could improve?

I wouldn’t say that there are. The whole engagement went very well; communication was smooth. I don’t have any constructive criticism. It’s been one of the better engagements I’ve been a part of. Their findings were very well documented and communicated. Some penetration testing engagements make you quarrel over the legitimacy of findings, but this isn’t the case with Vumetric’s team.

Do you have any advice for potential customers?

We asked if they’d worked with other similar organizations and what the requirements of those projects had been. Ask open-ended questions to initiate a back and forth. They’ll ask the right questions of you as well.

BACKGROUND

Introduce your business and what you do there.

I’m the VP of managed services at SMITH, an e-commerce technology and strategy firm. We are owned by a US-based company, but we have offices in Quebec, Canada, and Santiago, Chile. 

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Vumetric Cybersecurity? 

We hired Vumetric to do penetration testing for our annual report.

SOLUTION

What was the scope of their involvement?

We initially had a kickoff meeting where Vumetric explained what they would do. We also discussed our expectations. From there, we conducted multiple review meetings.  

At present, we continue to engage them for their testing services. During such tests, they scan our IT environment and all of our IP addresses to check for loopholes or vulnerabilities. The team then gives us their recommendations, and our resources fix every issue found. After that, the Vumetric team re-runs their tests. Then, they send us their final report.

The penetration testing for this year is done, but we maintain a business relationship with Vumetric. 

What is the team composition?

We work with one person from Vumetric. He’s responsible for their operations. 

How did you come to work with Vumetric Cybersecurity?

Vumetric was a referral by a business partner. 

How much have you invested with them?

The cost of penetration testing is $10,000 CAD (approximately $8,000 USD). 

What is the status of this engagement?

We started working together in November 2021, and the relationship is ongoing. 

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

The work that Vumetric has done is great. I’ll rate it highly. 

How did Vumetric Cybersecurity perform from a project management standpoint?

Vumetric’s project management is perfect. We haven’t used any project management tools like Jira since these aren’t necessary for our projects. To communicate, we use emails, phone calls, and video conferences. 

What did you find most impressive about them?

They’re responsive and communicate well with us. That’s one of the reasons why I’m going to use them again next when we need to conduct another penetration test.

Are there any areas they could improve?

No, there aren’t any.

Do you have any advice for potential customers?

I’ve been recommending Vumetric to my partners because I’ve had a great experience with them. Overall, their cost, expertise, and experience are great — I’ll be recommending them again if needed. 

BACKGROUND

Please describe your company and position.

I am the Coordinator, Infrastructure and Security of an education company 

Describe what your company does in a single sentence.

Education

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Vumetric to accomplish?

• Penetration Test

SOLUTION

How did you find Vumetric?

Referral

Why did you select Vumetric over others?

High ratings

How many teammates from Vumetric were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

External and Web penetration testing

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Detailed report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was delivered on time and professional.

What was your primary form of communication with Vumetric?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They are very competent.

Are there any areas for improvement or something Vumetric could have done differently?

Nothing to add

BACKGROUND

Please describe your company and position.

 I am the CTO of a healthcare company 

Describe what your company does in a single sentence.

SaaS in healthcare

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Vumetric to accomplish?

• Pentest
• Certifications assistance

SOLUTION

How did you find Vumetric?

Referral

Why did you select Vumetric over others?

• High ratings
• Close to my geographic location
• Great culture fit
• Company values aligned

How many teammates from Vumetric were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Penetration testing
• Certification consulting

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A more secure platform.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

On time and responded quickly.

What was your primary form of communication with Vumetric?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They have an awesome and comprehensive team.

Are there any areas for improvement or something Vumetric could have done differently?

No.