Whitespots.io

BACKGROUND

Please describe your company and your position there.

Restoraids is a service that aggregates promotional offers and deals of local restoraunts. I’m a CEO and Founder of the company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Whitespots.io?

We needed a full security assessment of our product RestoRaids.com.

What were your goals for this project?

Our main goals were:

• finding security vulnerabilities in the source code or our application
• testing all APIs of the web application for security vulnerabilities
• reviewing subdomains services for insecure configurations
• testing email vulnerabilities
• discovering chat-bot vulnerabilities.

SOLUTION

How did you select Whitespots.io?

From one of the Telegram channels. Whitespots was the only company who proved their skills and found a couple of bugs in our product for free, so we had no doubts of their expertise. Besides, they made a really attractive offer for us.

Describe the project in detail.

We decided to make a security assessment with the Blackbox approach. The scope of work was to test 23 APIs, check services hosted on our subdomains, review the source code and app configurations.

First of all, we signed NDA before starting the work. On the next day guys started doing their job, while we were able to continue our work - their tests didn't affect the regular work of our employees at all. We were limited to 3 business days, but it was enough for Whitespots.

In 3 days they provided a security assessment report with the results.

What was the team composition?

It was a CEO, an architect and a person, responsible for security.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Whitespots have found 4 critical vulnerabilities, one of which even allowed potential attacker to get full control over the whole service. They helped our team with with recommendations how to fix vulnerabilities. After that they've made rechecks to make sure that everything is fixed correctly.

How effective was the workflow between your team and theirs?

Very effective. Our daily work was not interrupted by the testing process. All the questions and requirements from Whitespots were clear and explained to us in detail. The feedback was also super-detailed and clear. It was a pleasure to work together.

What did you find most impressive about this company?

Their speed of work, skills and passion to help us with fixes. Our collaboration looked like they really wanted to help us. And they helped us a lot indeed.

Are there any areas for improvement?

It would have been a bit more convenient to track tasks in our internal bug tracker, but this really is a minor issue for us. I guess other clients might want this type of collaboration as well.

BACKGROUND

Please describe your company and your position there.

Exness is a world-leading, regulated multi-asset broker, providing online trading and investment services. Founded in 2008, the company has gone from strength to strength and today caters to a worldwide clientele, offering FX, precious metals, cryptocurrencies, indices and stocks. I work for Exness as Head of the IT department.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Whitespots.io?

We were interested in increasing the security of our applications so we could minimize the risks of a potential data breach and GDPR fines. We wanted to find the right partners to support us with our Bug Bounty program and handle all communication with external researchers on our behalf.

What were your goals for this project?

• Integrate security into SDLC process
• Maintenance for Bug Bounty program
• Implement SecDevOps practices
• Increase employee security awareness with security trainings

SOLUTION

How did you select this vendor?

LinkedIn

Describe the project in detail.

We were having problems with hiring security engineers in Cyprus where our HQ is located, so we decided to look at international companies providing cybersecurity services. Engineers from Whitespots did an analysis of our current security state with processes and technical solutions in just one month.

After that, they provided us with a roadmap and together we discussed which metrics we would use to measure the efficiency of our collaboration, and what our next steps would be.

They provided 2 security engineers from their team and started doing security training for employees, maintained our bug bounty program and implemented SecDevOps practices.

What was the team composition?

Two security engineers and one manager to deal with everything.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We have already seen positive changes in all our processes after focusing more on cybersecurity. We have been working with Whitespots for 5 months and in that time Whitespots has helped us decrease the time to first response in our Bug Bounty program by 3 times and increase the loyalty of researchers.

They also helped us reduce new security vulnerabilities in our applications by 40%, through the implementation of SecDevOps practices, prevent 2 potential cyber-attacks, and optimize costs for the security team by 30%.

What’s even more amazing is that they created a transparent process for reporting the results of their job through weekly meetings with us.

How effective was the workflow between your team and theirs?

We still continue to work with them today, and the collaboration is extremely effective.

What did you find most impressive about this company?

Industry-specific competencies, compliance and prices.

Are there any areas for improvement?

Nothing comes to mind.

BACKGROUND

Please describe your company and your position there.

Belkins offers a B2B lead generation service through email outreach for companies working in different industries. We help companies to get set up appointments and build a funnel of new leads. My position is Chief Executive Officer of the company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Whitespots.io?

We are growing and right protection of our client’s data starting to be more and more important for us. We didn't know what to do and tried to find someone who can help us in building the right protection with a friendly budget.

What were your goals for this project?

- Review current company processes;

- Review our current security solutions;

- Get cybersecurity consulting;

- Get help in building cybersecurity in the company in the right way

SOLUTION

How did you select this vendor?

By recommendation

Describe the project in detail.

In the beginning, we started from the process of review of what we have, processes, security solutions, etc. As a first step, guys showed us weak places in our processes, explained, and helped to integrate security steps into them.

From tech site, guys did a review of our technology solutions that we use for security, configured them properly, found really critical vulnerabilities in a few of our applications and helped to fix them, explained which solutions are better to use and we canceled few of our current.

What was the team composition?

Direct security engineer who helped us with all things.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

At the end of the project was found 2 critical vulnerabilities that lead to data loss, improved 3 core company processes with adding security steps into them (employee onboarding, employee offboarding, third party services usage), optimized costs by the cancelation of 2 security solutions that we were, configured 4 other security solutions to protect our client's data.

How effective was the workflow between your team and theirs?

Guys were ready to help 24/7 and the communication process was easy and friendly.

What did you find most impressive about this company?

They are experts and really know what they do. Their approach and vision of problems really impressed us.

Are there any areas for improvement?

I don’t think so, everything was fine