ExodusSec

BACKGROUND

Please describe your company and position.

I am the Professor of Kade Accounting Services

Describe what your company does in a single sentence.

Accounting

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire ExodusSec to accomplish?

• Web application penetration testing
• Remediate vulnerability

SOLUTION

How did you find ExodusSec?

Online Search

Why did you select ExodusSec over others?

Pricing fit our budget

How many teammates from ExodusSec were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

We are looking for a talented Penetration Tester to assess the security posture of our web application. As a Web Application Penetration Tester, you will be responsible for identifying vulnerabilities and potential security weaknesses in our accounting website. Your expertise will be crucial in helping us maintain the highest standards of security and protect the sensitive financial data of our clients.

• Responsibilities:
  • Conduct thorough penetration testing on our web-based accounting application to identify vulnerabilities, weaknesses, and security gaps.
  • Perform both automated and manual testing techniques to uncover potential security risks.
  • Document and prioritize discovered vulnerabilities, providing clear explanations and recommendations for remediation.
  • Collaborate with our development and security teams to ensure timely and effective implementation of security fixes.
  • Stay up-to-date with the latest web application security trends, techniques, and tools.
• Requirements:
  • Proven experience in web application penetration testing, preferably in the domain of financial or accounting applications.
  • Strong understanding of web application architecture, security protocols, and common vulnerabilities (OWASP Top Ten, etc.).
  • Proficiency in using penetration testing tools such as Burp Suite, OWASP Zap, Nmap, etc.
  • Familiarity with programming languages commonly used in web development (e.g., JavaScript, Python, PHP) is a plus.
  • Excellent communication skills, with the ability to clearly convey technical findings and recommendations to both technical and non-technical stakeholders.
  • Relevant security certifications such as OSCP, CEH, or CISSP are a plus.
  • Self-motivated, detail-oriented, and capable of working independently.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Our website is now secure from exploits

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Reports were provided on time, and the communication with their staff was great

What was your primary form of communication with ExodusSec?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Turn around time

Are there any areas for improvement or something ExodusSec could have done differently?

Very happy overall