Dhound

BACKGROUND

Please describe your company and your position there.

I'm a Security Manager at TeenUP - Video learning platform designed for teens.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Dhound?

We were looking for an independent penetration testing company to perform a pentest of our mobile app. Penetration testing was needed to confirm the high level of application security during the due diligence.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched for pentesting firms online and shortlisted 2. We chose this vendor based on their deep expertise and a free fixes retest.

Describe the project in detail and walk through the stages of the project.

At the start of work, we had an online call to demonstrate our application and transfer the necessary accesses and documentation for testing. Pentesters constantly kept in touch with us in a special chat in Slack. For testing they used OWASP Mobile Security Testing Guide 1.4. After the completion of the work, they provided us with a PDF report and offered its presentation, however, after reading the report, we realised that it was quite understandable and detailed. The Executive Summary was a great fit to provide it to investors in the course of due diligence.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with an account manager and 2 penetration testers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

During testing, a medium-severity vulnerability was identified that could lead to data leakage. This finding was important to us, since data leakage of teens is the most undesirable scenario for us.

How effective was the workflow between your team and theirs?

Communication was comfortable, we used email and a chat in Slack, their answers were always prompt.

What did you find most impressive or unique about this company?

We really liked the report as well as the communication process with this company.

Are there any areas for improvement or something they could have done differently?

It might have been a bit pricey, but the delivery we got was worth it.