Lambda Bit

BACKGROUND

Please describe your company and position.

I am the President & Founder of Security Addict, Inc.

Describe what your company does in a single sentence.

Security Addict, Inc is the parent company behind Zerocrat, the privacy-focused accounting suite.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Lambda Bit to accomplish?

• Code Review
• Security Audit

SOLUTION

How did you find Lambda Bit?

Social Meda

Why did you select Lambda Bit over others?

• Great culture fit
• Company values aligned

How many teammates from Lambda Bit were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

• Setuping Zerocrat.
• Performing Software Composition Analysis (SCA) - from a security perspective.
• Performing Static Application Security Testing (SAST).
• Performing Dynamic Application Security Testing (DAST).
• Performing Secure Code Review - following OWASP Code Review Guide and OWASP Application Security Verification Standard.
• Manually assessing Zerocrat security posture against typical application security risks such OWASP Top 10.
• Preparing a report with the discovered findings and recommendations.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Actionable recommendations that significantly strengthen our security posture. 
• Flagging crucial issues related to deprecated libraries, vulnerable dependencies, and dangerous exploits.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Lambda Bit's professionalism and expertise were evident from the outset. They conducted a thorough 64-hour security audit, during which he provided frequent updates. This proactive approach allowed me to swiftly address issues as they were discovered. Final deliverables we're on-time with exceptional quality.

What was your primary form of communication with Lambda Bit?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Lambda Bit's professionalism, technical proficiency, and genuine dedication make them an invaluable partner in fortifying digital security. I look forward to collaborating with them again in the future to ensure the ongoing integrity and safety of our application. Lambda Bit have set a high standard for security assessments, and I'm grateful for the outstanding service they provided to my business.

Are there any areas for improvement or something Lambda Bit could have done differently?

I can wholeheartedly recommend Lambda Bit to my peers and colleagues seeking top-tier security audits, there was no negative aspect to my experience.

BACKGROUND

Please describe your company and position.

I am the co-founder of AIGL

Describe what your company does in a single sentence.

AI integration and development services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Lambda Bit to accomplish?

• Application Security Assessment
• Vulnerability Assessment
• Penetration Testing

SOLUTION

How did you find Lambda Bit?

reddit

Why did you select Lambda Bit over others?

• Pricing fit our budget
• Great culture fit

How many teammates from Lambda Bit were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Adrean, on behalf of Lambda Bit, performed a time-boxed security assessment of our AI application. conducted between March 12th, 2024, and March 22nd, 2024, with a duration of 32 hours.
Scope: 

• Perform Software Composition Analysis (SCA) — limited to identifying vulnerable third-party. The testing was conducted remotely from Lambda Bit’s office. 

Components:

• Perform Static Application Security Testing (SAST);
• Perform Dynamic Application Security Testing (DAST);
• Assess the app against typical application security risks such as OWASP Top 10

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Lambda Bit discovered and reported seven vulnerabilities in our AI app, two of which were rated as critical severity, four as high, and one as medium. In addition to the reported vulnerabilities, further hardening recommendations were suggested.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Adrean demostrated excellent project management skill, delivery was on time, and all the needs were addressed. 

What was your primary form of communication with Lambda Bit?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We appreciated their professionalism and tailored approach.

Are there any areas for improvement or something Lambda Bit could have done differently?

no

BACKGROUND

Please describe your company and position.

I am the Software developer and maintainer of Goiabada (open source project)

Describe what your company does in a single sentence.

Open source software developer.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Lambda Bit to accomplish?
To assess the security of an Oauth2 OpenID server software

SOLUTION

How did you find Lambda Bit?

Online Search

Why did you select Lambda Bit over others?

• High ratings
• Pricing fit our budget

How many teammates from Lambda Bit were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

• Adrean conducted a thorough security assessment of Goiabada, an OAuth2 OIDC server that I maintain. 
• He identified several critical security issues that had previously gone unnoticed. Throughout the process, he maintained clear communication through email and meetings, providing some great feedback at every step of the analysis. 
• The final report Adrean gave me was comprehensive and well-written, detailing each discovered vulnerability (ranked by severity) and explaining their exploits and possible solutions. This was extremely helpful in hardening our code.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

A list of software vulnerabilities explained in detail, each accompanied by exploitation methods, and recommendations for fixing them.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Very much on time, with clear communication on expected events throughout the process.

What was your primary form of communication with Lambda Bit?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They had excellent communication and project management, with bespoke and personalized attention. Highly skilled in the area of security.

Are there any areas for improvement or something Lambda Bit could have done differently?

None that I can think.