Iterasec

BACKGROUND

Please describe your company and your position there.

I'm the director of security at Securrency. We are a US and UAE based technology company focus on compliance and policy enforcement, and interoperability of legacy systems and new technologies such as blockchain and smart contracts.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire iterasec?

We were looking for cybersecurity experts who can help us with assessing the security of our API endpoints. We wanted to identify security flaws that can lead to potential compromise.

SOLUTION

How did you select this vendor and what were the deciding factors?

We had approached multiple vendors and had performed security assessment and analyses the quality of the findings and the testing methodology.

Describe the project in detail and walk through the stages of the project.

The team had detailed interaction with our development and business team to gain understand of API and the business functionality. This helped them in identify both technical and business logic flaws. The had shared a detailed report with findings and mitigations. they also worked with our QA team to develop test cases to identify the flaws in future code and detect it in our QA tests.

How many resources from the vendor's team worked with you, and what were their positions?

Two penetration testers and a project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We had worked with multiple vendors in the past and found the issues/flaws reported to be of value and importance.

How effective was the workflow between your team and theirs?

We had frequent communication via dedicated teams' channels.

What did you find most impressive or unique about this company?

The team showed a keen interest in understanding our business. This helped identify critical business logic flaws.

Are there any areas for improvement or something they could have done differently?

No

BACKGROUND

Please describe your company and your position there.

I am the CEO of a Germany-based company specializing in security solutions and mobile development. Since 2001 the company has been focusing on mobile technologies starting from the earliest smartphones.

Our primary area of expertise is secure mobile development: we help customers protect their mobile solutions. The company’s customer portfolio includes governments, automotive brands, telecom, military, and other industries.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire iterasec?

When we start a new project we perform threat modeling as a first step of the shift-left security paradigm. In one of the new projects, we decided to perform threat modeling independently by another company. Hence we decided to engage Iterasec to support us in these activities.

What were your goals for this project?

The goal of this project was to brainstorm on the threats applicable for this type of product, evaluate risks and design respective countermeasures.

SOLUTION

How did you select iterasec?

We had a good experience working with Iterasec colleagues on some other security projects in the past.

Describe the project in detail.

The project consisted of several workshops, where Iterasec specialists performed threat modeling sessions with the dev team. They also jointly evaluated risk levels and suggested countermeasures.

What was the team composition?

The team consisted of 2 specialists: a senior application security consultant and a project manager.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The results exceeded our expectations: we encountered misuse and hacking scenarios that the development team hasn’t thought about before the threat modeling sessions.

As a result, we were able to include remediations in the product design from the very beginning.

How effective was the workflow between your team and theirs?

The communication with the Iterasec team was constructive and clear.

What did you find most impressive about this company?

We were impressed by the way they think from a hacker’s perspective, this allowed the development team to better understand security risks.

Are there any areas for improvement?

All in all, we were satisfied with the project quality and overall experience.

BACKGROUND

Please describe your company and position.

I am the CTO of Blockwave Innovations

Describe what your company does in a single sentence.

B2B crypto exchange platform

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Iterasec to accomplish?

• Conduct a comprehensive penetration test of our B2B crypto exchange platform to identify and validate security vulnerabilities, with a focus on high and critical risks
• Strengthen our overall security posture and ensure the platform meets the expectations of the Czech National Bank.
• Support our application for authorization under the Markets in Crypto-Assets Regulation by demonstrating robust security practices
• nsure compliance with the Digital Operational Resilience Act, particularly in the areas of resilience, risk management, and incident readiness.

SOLUTION

How did you find Iterasec?

Other

Why did you select Iterasec over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from Iterasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• pentest

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Passed the pentest, which was aligned with DORA 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team delivered the work on time

What was your primary form of communication with Iterasec?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their team was professional, responsible, and highly focused throughout the process.

Are there any areas for improvement or something Iterasec could have done differently?

In our case, Iterasec met all the expectations. We did not identify any areas for improvement

BACKGROUND

Introduce your business and what you do there.

I’m the co-owner of Abra, a company that provides products and services to help make apps accessible.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Iterasec?

We needed help with penetration testing for our ecosystem.

SOLUTION

What was the scope of their involvement?

Iterasec provides penetration testing services and delivers reports.

What is the team composition?

We work with 2–5 teammates from Iterasec.

How did you come to work with Iterasec?

We’ve been working with Iterasec for years because they provide good value for the cost and high-quality services.

What is the status of this engagement?

We started working together in February 2026, and the engagement is ongoing.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Iterasec’s penetration testing reports have helped us identify and improve our ecosystem.

How did Iterasec perform from a project management standpoint?

Iterasec’s project management is great. The team delivers on time, and their communication and planning are clear.

What did you find most impressive about them?

Iterasec’s team is very professional. Their communication is smooth, effective, and to the point, which makes the process clear, understandable, and reliable.

Are there any areas they could improve?

I don’t think there’s anything they can improve on because we’re satisfied with their work.

BACKGROUND

Please describe your company and position.

I am the Security Architect of Intellias

Describe what your company does in a single sentence.

The company is a global technology partner enabling change and transformation across industries, and generating long-lasting value for businesses, people, and the wider world.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Iterasec to accomplish?

• Conduct external network pentest
• Conduct external website scan/pentest
• Conduct application grey-box pentest
• Conduct configuration review
• Prepare a detailed report on found vulnerabilities and remediation steps

SOLUTION

How did you find Iterasec?

Online Search

Why did you select Iterasec over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

How many teammates from Iterasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The vendor conducted threat modeling, external network and website penetration testing, and web application security testing for critical corporate assets based on OWASP TOP 10 & CWE taxonomies. They prepared a detailed report of detected vulnerabilities and remediation steps.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Weekly status reports and the final report.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The vendor delivered results on time and was always available to communicate.

What was your primary form of communication with Iterasec?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Iterasec impressed us the most with their thorough approach and high-quality results. It's also worth mentioning the great communication with the team.

Are there any areas for improvement or something Iterasec could have done differently?

We are overall satisfied with the vendor and nothing specific to mention here.

BACKGROUND

Please describe your company and position.

I am the Working student - Security of an IT consulting company

Describe what your company does in a single sentence.

It-Consulatancy for Fin-techs & TPPs, Banks

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Iterasec to accomplish?

• Pen-testing
• Configuration Reviews
• ISO27001 Advisory

SOLUTION

How did you find Iterasec?

Online Search

Why did you select Iterasec over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Iterasec were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Pentesting of Network and on-premise applications, configuration review of SaaS-Applications

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Deliverables/Reports

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They deliver items on time and are always ready to help. Queries were timely answered.

What was your primary form of communication with Iterasec?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Cost-Value for their services is very good. Also very competent leadership figures.

Are there any areas for improvement or something Iterasec could have done differently?

I wish for more services to be offered because we would've liked to keep working with them.

BACKGROUND

Please describe your company and position.

I am the Founding Partner of QEPR

Describe what your company does in a single sentence.

Loss prevention and swift return of lost smart phones

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Iterasec to accomplish?

• Security

SOLUTION

How did you find Iterasec?

Online Search

Why did you select Iterasec over others?

High ratings

Describe the scope of work in detail. Please include a summary of key deliverables.

web and IoT security

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

From a technical perspective, they did a great job guiding our development team on secure engineering, best practices, while performing focused security evaluation’s along the way to insuur, reduced risk and vulnerabilities.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

From a business perspective- very professional, comprehensive in the level of detailing, and adherence to follow-though on all tasks.

What was your primary form of communication with Iterasec?

Virtual Meeting

What did you find most impressive or unique about this company?

Would recommend!

Are there any areas for improvement or something Iterasec could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the Co-founder & CTO of TrueClicks

Describe what your company does in a single sentence.

TrueClicks app provides scores and recommendations that are actionable, prioritized, specific, and unbiased for PPC accounts.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Iterasec to accomplish?

• Pentest for ISO 27001

SOLUTION

How did you find Iterasec?

Referral

Why did you select Iterasec over others?

Referred to me

What was your primary form of communication with Iterasec?

Virtual Meeting

Describe the scope of work in detail. Please include a summary of key deliverables.

Execute a pentest of our platform and deliver a pentest report that can be used to satisfy ISO 27001 requirements.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Weekly progress reports

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was executed according to an agreed plan.

What did you find most impressive or unique about this company?

They provided clear instructions on what we should deliver at the beginning of the pentest. We didn't have to prepare much, they could do most of the tests outside our organization.

Are there any areas for improvement or something {provider_name} could have done differently?

No

BACKGROUND

Please describe your company and your position there.

I’m a developer of a web-based Saas product

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Iterasec?

We were looking for a cybersecurity company to perform a routine audit of our site and SAAS product

SOLUTION

How did you select this vendor and what were the deciding factors?

I wasn't involved in this process

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our product

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager, a couple of security analysts, and a couple of pen testers

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify some vulnerabilities that we were then able to sprint and resolve. Our product is better for having gone through this process.

How effective was the workflow between your team and theirs?

They kept us updated through each round of testing and sent us weekly status updates.

What did you find most impressive or unique about this company?

They really went in depth

Are there any areas for improvement or something they could have done differently?

Nothing offhand right now

BACKGROUND

Please describe your company and your position there.

We are web application development company. My position is PM

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire iterasec?

The challenge was to find security vulnerabilities in the project and improve security protection

What were your goals for this project?

1. Conduct penetration test
2. Improvements consultation

SOLUTION

How did you select this vendor?

They came across as real professionals, so that was easy

Describe the project in detail.

We hold a kick-off meeting at the beginning and provide some useful tips of the project structure. Provided access to the servers and to the application were the penetration test was holded

What was the team composition?

2 professionals - Penetration tester and manager

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The result was really great. We received a huge report with a prioritized list of vulnerabilities.

How effective was the workflow between your team and theirs?

The communication was easy and effective

What did you find most impressive about this company?

They showed us a look from another perspective.

Are there any areas for improvement?

-