How did you select this vendor?
It was important for us that a penetration testing was conducted by a certified expert with extensive experience and focus on a manual approach.
Describe the project in detail.
The process began with scoping meetings, they sought to understand in detail the system, its features, risks and our concerns. Then pre-testing establishment - transfer and verification of necessary accesses and documentation, so that neither side is distracted by this during testing. Then test itself, they informed us of the critical findings immediately so that we could fix those asap.
At the end of the work, the experts provided a very detailed but easy to understand report with all findings, risk ratings, steps to reproduce and remediation advice. They also accompanied us after reporting to recheck our fixes.
What was the team composition?
We communicated with the project manager on organizational matters and directly with the expert who conducted the pen test.