Cyber Dacians

BACKGROUND

Please describe your company and your position there.

I work as an independent security consultant for various companies. For the client that I contracted Cyberdacians, I am responsible for overall Information Security of the company, having coordinated pentests and major security projects in the last 3 years.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

Web application Penetration testing

What were your goals for this project?

Identify critical and overall security vulnerabilities in our customer facing web application

SOLUTION

How did you select this vendor?

Cyberdacians were selected after comparing with 2 other vendors and after contracting other 3 companies in the last 3 years for penetration testing. The selection was done based on the skills of the pentesters, as Cyberdacians positioned themselves as the most prepared, having a broad international CTF experience. Another criteria was that of pricing, were Cyberdacians provided with the most reasonable terms from all vendors.

Describe the project in detail.

From my side, the process was pretty much standard, as it was repeated with other vendors in the past years. I liked the fact that Cyberdacians made it smooth for us to begin with, as the initial assessment of the platform size was done very fast, enabling both us and them finalize our vendor agreement.

What was the team composition?

The overall team project consisted of myself as on-site coordinator of the pentest and the Cyberdacians team, namely 2 penetration testers and 1 technical lead to assist in communication and offsite coordination.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We felt progress in the form of the severity of the vulnerabilities. Our previous vendor lacked the capability to find high severity findings, whereas Cyberdacians managed to identify them fast and report on it during the pentest and not just after.

How effective was the workflow between your team and theirs?

We managed to communicate over Slack very easily during the pentest and then we addressed the matters over email after the project was done. I appreciate the fact that I was informed about potential critical vulnerabilities during the project and not just after.

What did you find most impressive about this company?

The international experience of the individual technical profiles as well as the smooth coordination given the geographical distribution of the team.

Are there any areas for improvement?

I am overall satisfied with the project and see myself collaborate with Cyberdacians on both this project and others in the future. There can always be some sort of improvement and what I recommend is streamlining the report generation and vulnerability remediation process via a web interface. This will reduce time spent for both Cyberdacians and customers and various on small issues that typically go back'n'forth several times.

BACKGROUND

Please describe your company and your position there.

I am the General Manager of a web development agency, headquartered in Cluj - Napoca, Romania. Our main services are web design and web development for clients all over Europe.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

We have developed a SaaS platform for eLearning, for a client, and after the release the client asked for a penetration test for the platform. Because we do not have these services in our team, I reached out to the CyberDacians team management for this service.

What were your goals for this project?

Checking for any existing vulnerabilities in the SaaS platform, before the official launch.

SOLUTION

How did you select this vendor?

I know one of the cofounders, Radu. I talked to him after starting their business and noticed that their expertise is growing and that they are capable of doing penetration testing services on different types of environments.

Describe the project in detail.

We worked with the Cyber Dacians team to put together a plan for this project. In the next steps we clarified all the necessary specifications. In the next step, the Cyber Dacians team created a timeline for all the milestones and in the end they provided the results.

What was the team composition?

2 technical people.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The outcome was a report that the team provided where we analyzed together, the potential risks and vulnerabilities. After we fixed the risks, the team did another test to make sure that everything was secure.

How effective was the workflow between your team and theirs?

We had a really effective communication so this helped to not have any big blockers and we stayed in the agreed timeline.

What did you find most impressive about this company?

The technical team has extensive cybersecurity knowledge. They are always looking to go the extra mile to make sure that things are communicated clearly and that they deliver quality.

Are there any areas for improvement?

No.

BACKGROUND

Please describe your company and your position there.

I'm the CEO of Mediatic, a web agency based in Cluj-Napoca. We craft tailored websites, visual identities and offer digital solutions through effective design. Our main services are UX/UI, web design and web development

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

We hired Cyber Dacians to help us having an cybersecurity audit from a web platform that we developed

What were your goals for this project?

We wanted to check if there are any vulnerabilities and to see where we stand with web platform and server security levels

SOLUTION

How did you select this vendor?

We have searched among our previous partners

Describe the project in detail.

We started with an analysis of the project with the objective of better understanding what would be the directions of the audit. The first step was to select a set of tools for the security audit and do a first automated test. In the second step the security team made a deeper analysis and also did some manual testing. For each vulnerability that was found, the team gave us the information and we took the security measures that were needed.

What was the team composition?

2 technical security experts and 1 technical manager

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The success of the project was the fact that the team found the vulnerabilities that helped us secure the platform and then the team did a second test to make sure that those vulnerabilities have been fixed.

How effective was the workflow between your team and theirs?

Using project managers on both sides we had an effective collaboration and workflow

What did you find most impressive about this company?

Knowledge level and response time

Are there any areas for improvement?

A couple of tasks could be done faster. Overall, everything was done fast at a really good quality.

BACKGROUND

Please describe your company and your position there.

I am the CEO of a web development agency, headquartered in Bucharest, Romania. We provide web design and web development services to small and medium businesses.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

A client that we just started working with, reported that they had problems with their platform from a security perspective. They were the target of a security breach and now are looking for a penetration testing audit and also to upgrade the UI/UX of their platform. Cyber Dacians has provided the first service: a penetration test.

What were your goals for this project?

To find all the existing vulnerabilities so that they can be fixed in the platform upgrade.

SOLUTION

How did you select this vendor?

We received a recommendation from one of our clients that has worked in the past, with Cyber Dacians. In the next step we had a few technical discussions with them, and they convinced us with their expertise and work process.

Describe the project in detail.

After explaining what we expected out of this project, the Cyber Dacians team asked all the right questions to make sure that they have all the necessary information. Next, they created a timeline that they also communicated to us, and then we kept track together on the deadlines and milestones.

What was the team composition?

A team of 2 technical people with penetration testing expertise.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

At the end of the audit, Cyber Dacians provided an audit report with all the vulnerabilities that they had found. The audit was well structured, with each vulnerability described in details, with ways to reproduce it and solutions for fixing them. This made it easy to conclude that the outcome was a success because of the results presented in the report.

How effective was the workflow between your team and theirs?

It was really effective because their team was really responsive and always open to discussing the best approach. They worked closely with us during the vulnerability fixing period which made things go even smoother.

What did you find most impressive about this company?

Their management team is top class. Their technical capabilities are senior level, and they deliver on their promises.

Are there any areas for improvement?

Not from my perspective.

BACKGROUND

Please describe your company and your position there.

I am the CEO of Risktronics, an information security firm.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

We hired them to do a penetration test of critical infrastructure for a major client in the financial sector.

What were your goals for this project?

Our goal was to identify critical vulnerabilities in our customer’s cloud infrastructure.

SOLUTION

How did you select this vendor?

I met Cyber Dacians during a local IT conference. After the initial discussion, I was convinced that we would work with them.

Describe the project in detail.

Cyber Dacians did a security penetration test that attempted to identify security vulnerabilities and software configuration errors. They worked remotely on several computer systems and target facilities owned and operated by our client.

Cyber Dacians was responsible for:

• Researching the environment using publicly available data sources such as search engines and web sites
• Performing automated network sweeps of IP addresses on- and off-campus
• Profiling the operating system, services, and applications, including version numbers for subsequent tests
• Identifying and testing potential vulnerabilities and control weaknesses in the system
• Conducting vulnerability validation and exploitation to minimize false reports of problems
• Attempting privilege escalation to obtain complete control of the system.

What was the team composition?

We worked with one project manager and two senior penetration testers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

In less than one week, the Cyber Dacians team found three critical vulnerabilities in the cloud infrastructure that had perplexed our customer's IT team.

How effective was the workflow between your team and theirs?

It was perfect, thanks to Cyber Dacians’ fast and effective work. We had no frictions whatsoever.

What did you find most impressive about this company?

They were extremely professional and motivated. They charged competitive prices for the services offered.

Are there any areas for improvement?

No, nothing comes to mind. Everything was flawless from our point of view.

BACKGROUND

Please describe your company and your position there.

Manager of a company that provides a web-based SaaS DMS solution, McFile

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

Execution of an anual pentest on McFile

SOLUTION

How did you select this vendor and what were the deciding factors?

Searched online for cybersecurity companies. After talks with some, we chose cyberdacians based on their service package and experience

Describe the project in detail and walk through the stages of the project.

Execution of an anual pentest on McFile

How many resources from the vendor's team worked with you, and what were their positions?

a manager and a penetration tester

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The project was able to found vulnerabilities on our solution. They were fixed and the service could improve.

How effective was the workflow between your team and theirs?

It was good. We created a slack channel to improve communication.

What did you find most impressive or unique about this company?

We appreciated their attention to details and the excellent multidisciplinary team.

Are there any areas for improvement or something they could have done differently?

No

BACKGROUND

Please describe your company and your position there.

I am the CTO of a company offering outsourcing services to portfolio managers

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

We were looking for a company specialising in Cybersecurity for our anual Penetration Testing audit.

SOLUTION

How did you select this vendor and what were the deciding factors?

We shopped around for offers from several vendors and Cyberdacians looked like a good mix of quality and affordability.

Describe the project in detail and walk through the stages of the project.

Process was quite simple. After signing all the paper work and agreeing on compensation we set a schedule for the audit. We communicated before, during and after the engagement. A few days after the engagement was finished we received a report. The report was comprehensive, detailed and helped us improve our security.

How many resources from the vendor's team worked with you, and what were their positions?

1 project manager and 1 penetration tester

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Found both significant vulnerabilities and taught us several best practices

How effective was the workflow between your team and theirs?

We had an active slack channel where we continuously discussed and asked questions. They gave prompt and thoughtful answers.

What did you find most impressive or unique about this company?

good mix of value, expertise and affordability.

Are there any areas for improvement or something they could have done differently?

I would polish the report format and double check the vulnerabilities because we received a false positive.

BACKGROUND

Please describe your company and your position there.

I am CEO of the company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Cyber Dacians?

Conducting routine black- and gray-box testing of our cloud applications and to provide specialist consultancy to our technical team, ensuring the maximum possible security of our systems and software.

What were your goals for this project?

Ensure best practices for cloud security are followed by our technical team and to test for application security.

SOLUTION

How did you select Cyber Dacians?

We shortlisted three companies and extensively interviewed them.

Describe the project in detail.

No further comment to add.

What was the team composition?

No further comment to add.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We are very happy with the service and professionalism - highly recommended!

How effective was the workflow between your team and theirs?

No further comment to add.

What did you find most impressive about this company?

No further comment to add.

Are there any areas for improvement?

No further comment to add.