ArkSentry

BACKGROUND

Please describe your company and position.

I am the IT Project Manager of Medical Software Solutions

Describe what your company does in a single sentence.

We are a medical billing software company.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Arksentry to accomplish?

• Penetration testing on our product

SOLUTION

How did you find Arksentry?

They had reached out to us via email.

Why did you select Arksentry over others?

Company values aligned

How many teammates from Arksentry were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The penetration testing was conducted in multiple rounds. In the first round, Adeel did not provide login credentials and instead sent sandbox addresses for testing after 7 PM CDT. The team focused on identifying vulnerabilities that could be exploited without authentication and provided detailed notifications of their findings, which allowed us to address potential issues promptly. Adeel was particularly interested in seeing if the team could gain access without logins, highlighting the need for CAPTCHA implementation.

In the second round, the team tested from one office to another, which was treated as low severity but was patched immediately as per Adeel's request.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The team provided a comprehensive assessment report that included potential attack scenarios, step-by-step reproduction instructions, impact analysis, and recommended mitigation strategies. They also mapped all testing findings to ASVS controls, providing a measurable way to evaluate the retesting results.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Throughout the project, we maintained fluid communication via Slack, which ensured that all deadlines were met. This effective communication allowed us to address any issues in real-time and kept the project on track.

What was your primary form of communication with Arksentry?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Overall, the cyber security team exceeded our expectations with their thorough and methodical approach. Their findings and recommendations have significantly improved our security posture. We highly recommend their services to organizations seeking to enhance their cyber security measures.

Are there any areas for improvement or something Arksentry could have done differently?

However, there was a language barrier with one of their teammates, which occasionally hindered communication. Improving this aspect could further enhance their service.