Ownux Global

BACKGROUND

Please describe your company and position.

I am the IT Systems Specialist of Seven Steps to Writing Success

Describe what your company does in a single sentence.

Seven Steps is an EdTech company that provides teachers with all the tools they need to learn and implement the Seven Steps writing program in their schools.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Conduct penetration testing of our systems to identify vulnerabilities.
• Produce penetration testing reports that we can include in our application for the Safer Technologies for Schools (ST4S) initiative.
• Assist in the re-testing process after identified vulnerabilities have been fixed.

SOLUTION

How did you find Ownux Global?

Upwork

Why did you select Ownux Global over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Ownux Global to conduct penetration testing for our platform at Seven Steps Writing as part of meeting ST4S (Safer Technologies 4 Schools) regulatory requirements.

They tested all our applications and provided us with reports that we could submit as part of our ST4S application. They were also responsible for re-testing the identified vulnerabilities after they had been fixed by our development team.  

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Penetration testing reports were provided to us for review on time, and all milestones set in the project plan were met.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

From the very first conversation, the team was upfront about scope, methodology, and timelines. I knew exactly what would be tested, which phases were involved, and when each deliverable would arrive.

All the project milestones were met on time, and their communication throughout the project was excellent. 

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The penetration testing reports themselves stood out as one of the most useful security deliverables we've received. Our development team was able to run with these reports and fix all the vulnerabilities by following the reproduction steps that were listed for each issue. There was very little back and forth that was required, but when we did have questions, the team at OwnUX Global promptly replied and worked through the issues with us.

Are there any areas for improvement or something Ownux Global could have done differently?

There is nothing they could have done differently. I would recommend OwnUX Global without hesitation for any EdTech or SaaS company navigating ST4S, ISO 27001, SOC 2, or general VAPT requirements. They deliver excellent cybersecurity services with genuine professionalism.

BACKGROUND

Please describe your company and position.

I am an executive at Kitsa Inc.

Describe what your company does in a single sentence.

Kitsa is the world's largest Clinical Research Network. It helps connect Pharmaceutical Sponsors with Clinical Research Sites and other research participants to accelerate clinical trials.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Penetration Testing
• SOC 2 Type II Audit
• ISO 27001 Certification

SOLUTION

How did you find Ownux Global?

Online Search

Why did you select Ownux Global over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We needed a comprehensive audit of our Application Platform to prepare us for an upcoming audit. We are a healthtech company with the entire infrastructure on AWS. So, we needed compliance consulting and to assess the security framework and consult on managing the security and compliance gaps. The key deliverables were - VAPT ( Vulnerability and Penetration Testing) Report SOC 2 Type II Audit Enablement ISO 27001 Audit Enablement HIPAA compliance enablement 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We got all the 3 major reports delivered on time. The client raised no questions - everything was perfect and good quality.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Since time was of essence we aily meetings and a team member was assigned full time on the project. Our Key contact and the team member were both available at all the times on teams chat and responded immidiately and professionally. 

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• I was impressed with their attention to detail.
• Ability to deliver complex tasks in time - everything went according to the plan
• The team stayed within the budget - timing, deliverables were predicatble, and perfect quality.  

Are there any areas for improvement or something Ownux Global could have done differently?

None.

BACKGROUND

Please describe your company and position.

I am the Founder of DoLead - iFAL Ltd

Describe what your company does in a single sentence.

We are an internet marketing agency and also help founders and owners to create new applications and web development. In order to bring results, we do out of box marketing and with a mission to deliver results.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Find security issues in the application
• Improvise security of our application

SOLUTION

How did you find Ownux Global?

Referral

Why did you select Ownux Global over others?

• Good value for cost
• Company values aligned

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration Testing was the goal. Our primary objective was to ensure that our mobile application is secure, robust, and ready for public release. Given the sensitive nature of the customer data that our application handles, it was imperative to conduct a comprehensive security assessment to identify and mitigate any potential vulnerabilities.

The expected key deliverables were:

1. A detailed technical report outlining the findings of the security assessment.
2. Remediation Guidance
3. Follow-up Support
4. Validation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The VAPT (Pentesting) services provided by Ownux resulted in several measurable outcomes that clearly demonstrate the progress and success of the project.

1. Number of Vulnerabilities Detected
2. How critical it is
3. Resolution
4. Are they best practices?
5. Developer support

Since the implementation of Ownux’s recommendations, we have observed a 60% reduction in security-related incidents reported by users or detected through our internal monitoring systems. There was a significant progress and success achieved through Ownux’s VAPT and Pentesting services. The comprehensive security assessment and subsequent remediation efforts have fortified our application, ensuring a secure and trustworthy experience for our users.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All deliverables, including the comprehensive security report and remediation guidance, were provided within the stipulated timeframe. This punctuality facilitated our development team’s ability to promptly address identified vulnerabilities. 
They also demonstrated flexibility in accommodating our specific requirements and adjusting the scope of work as needed during the assessment process. Their responsiveness ensured that our unique security concerns were effectively addressed.

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

One of the most impressive and unique aspects of Ownux was their comprehensive approach to security assessment and remediation. Ownux demonstrated a deep understanding of cybersecurity principles and techniques. Their team possessed extensive knowledge in identifying complex vulnerabilities and provided thorough insights into potential exploits and mitigation strategies. 
Their support didn’t end with the delivery of the final report. Ownux provided ongoing assistance and clarification as we implemented their recommendations, demonstrating a commitment to our long-term security success.

Are there any areas for improvement or something Ownux Global could have done differently?

No, we loved how everything was taken care of.

BACKGROUND

Please describe your company and position.

I am the Founder/CEO of Addressless mailing Ltd t/a DustiD

Describe what your company does in a single sentence.

Collect, store and distribute shipping address details to online retailers on behalf of their customers

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Test our platforms security against known cyber attacks

SOLUTION

How did you find Ownux Global?

Referral

Why did you select Ownux Global over others?

• Pricing fit our budget
• Good value for cost
• Referred to me

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Ownux to conduct a thorough security assessment of our networked platform, and we were extremely pleased with the results.

Their expertise and professionalism have been invaluable in ensuring the safety and integrity of our system. From the initial consultation to the final deliverables, Bhashit and the team demonstrated a deep understanding of our specific needs and challenges. They conducted a comprehensive penetration testing, identifying vulnerabilities and potential risks within our network.

Their team of skilled professionals meticulously analysed our platform, leaving no stone unturned. The deliverables provided by Ownux were exceptional. They presented us with a detailed report outlining the vulnerabilities discovered, along with practical recommendations for remediation.

Their findings were presented in a clear and concise manner, making it easy for our team to understand and prioritise the necessary actions. Throughout the engagement, Ownux maintained open lines of communication, promptly addressing any questions or concerns we had. Their team was always available to provide guidance and support, ensuring a smooth and efficient process.

Thanks to the efforts of Ownux, we now have a robust and secure networked platform. Their expertise and attention to detail have given us peace of mind, knowing that our sensitive data and systems are protected against potential threats. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Reduction in Security Incidents:
• Improved Incident Response Time:
• Enhanced Security Awareness and Training:
• Compliance with Regulatory Requirements:
• Enhanced Security Controls:
• Stakeholder Satisfaction:

Describe their project management. Did they deliver items on time? How did they respond to your needs?

From the moment we engaged with Ownux, their responsiveness and dedication to understanding our unique requirements were evident. They took the time to listen to our concerns and conducted a thorough assessment of our existing security infrastructure.

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Quality,cost and efficiency. Their customer service is also excellent before, during and after

Are there any areas for improvement or something Ownux Global could have done differently?

From my own personal experience Ownux were excellent

BACKGROUND

Please describe your company and position.

I am the CEO of Global Finreg A/S

Describe what your company does in a single sentence.

We provide Legal Entity Identifiers and software solutions for Legal Entity Identifiers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Acheive security clearance for a customer
• Make our application more secure

SOLUTION

How did you find Ownux Global?

Referral

Why did you select Ownux Global over others?

• Good value for cost
• Referred to me

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Ownux provided both network and application penetration testing. They not only pinpointed vulnerabilities, but helped us fix each one.The deliverable was a much more secure application and a document that showed our clients that we had taken the necessary steps to make sure our data was secure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Since we worked with Onux, we have had many cybersecurity attacks (DDOS, other) and not one of them was succesful.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Ownux works with my time frame. I'm incredibly busy but they are patient to work within my schedule and remind me to finish up when I need to.

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Ownux Global provides a hands-on custom approach to penetration testing. They don't use automated systems or canned reports. Furthermore they go through each issue with you and help you fix it with recomendations.

Are there any areas for improvement or something Ownux Global could have done differently?

No, they are great

BACKGROUND

Please describe your company and position.

 I am the CEO of an IT company 

Describe what your company does in a single sentence.

Claim automation

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Compliance certification readiness

SOLUTION

How did you find Ownux Global?

UpWork

Why did you select Ownux Global over others?

• Pricing fit our budget
• Good value for cost

How many teammates from Ownux Global were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

HIPAA/SOC2 Type I/ ISO 27001 Compliance Readiness

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Compliance platform-determined audit readiness across 3 certifications

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes to both

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They met our audit readiness needs.

Are there any areas for improvement or something Ownux Global could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the Cybersecurity Consultant of HelloBible

Describe what your company does in a single sentence.

Creating app

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Do a pentest on an app

SOLUTION

How did you find Ownux Global?

Online Search

Why did you select Ownux Global over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The goal was to do a full pentest on an app (API, LLM, APK)
the scope of the pentest was:

• Network pentest
• API pentest
• Mobile Pentest
• Cloud pentest
• internal network pentest
• Souce code review

A detailed report was written for each of these Pentests

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes were the pentest reports submitted after each pentest

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• good communication
• good time delivery
• good understanding of the tasks

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Early on, they had a good understanding of the tasks and needs. They also had a great work ethic.

Are there any areas for improvement or something Ownux Global could have done differently?

not really 

BACKGROUND

Please describe your company and position.

 I am the Security Analyst of a financial services company 

Describe what your company does in a single sentence.

Provides cyber security solutions

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Ownux Global to accomplish?

• Identifying Vulnerabilities: Proactively discover and fix security weaknesses before they are exploited.
• Testing Security Defenses: Assess and enhance the effectiveness of existing security measures and protocols.
• Compliance Requirements: Ensure adherence to industry standards and regulatory mandates through comprehensive security assessments.
• Compliance Requirements: Ensure adherence to industry standards and regulatory mandates through comprehensive security assessments.Competitive Advantage: Demonstrate commitment to robust cybersecurity practices to enhance trust and reputation.

SOLUTION

How did you find Ownux Global?

Referral

Why did you select Ownux Global over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Ownux Global were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of Work:

Web Application Penetration Testing:

• Thorough assessment of web applications, including frontend and backend components.
• Identification of vulnerabilities such as SQL injection, XSS, CSRF, etc.
• Testing authentication mechanisms, session management, and access controls.

Mobile Application Penetration Testing:

• Analysis of security flaws in mobile applications (iOS and Android).
• Evaluation of data storage, communication security, and app permissions.
• Testing for vulnerabilities specific to mobile platforms.

Network Penetration Testing:

• Examination of network infrastructure for weaknesses and misconfigurations.
• Assessment of firewall rules, routers, switches, and VPNs.
• Identification of potential entry points and lateral movement paths.

Cloud Security Assessment:

• Evaluation of cloud infrastructure (AWS, Azure, GCP, etc.) for security risks.
• Review of cloud architecture, configurations, and access controls.
• Testing for vulnerabilities like insecure APIs, data exposure, and account hijacking.
   Key Deliverables:

Technical Report:

• Detailed Proof of Concepts: Demonstrations of how vulnerabilities were exploited.
• Fix Information with Source Code and Configuration Examples: Detailed instructions on how to mitigate each issue.
• Specific to Your Network & Application: Customized findings relevant to your environment.
• Sample Configuration/Code for Patching: Example scripts or configurations for implementing fixes.
• Instances and Parameters: Details on where and how vulnerabilities were discovered.
• High-Level Summary of Issues: Overview of findings categorized by severity.
• Impact and Root Cause Analysis: Assessment of the potential impact of vulnerabilities and their underlying causes.
• Action Items for Remediation: Clear recommendations for addressing identified vulnerabilities.
• Certificate Once All Issues Are Fixed: Formal documentation indicating successful resolution of all reported issues.

Issue Tracker:

• Number of Issues: Quantification of vulnerabilities discovered.
• Issue Status: Current state of each identified issue (open, in progress, resolved).
• Instances: Specific occurrences of each vulnerability

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Measurable outcomes from the project that demonstrate progress or success typically include:

1. Reduction in Vulnerabilities: Quantitative reduction in the number and severity of vulnerabilities identified through penetration testing sessions compared to previous assessments or industry benchmarks.
2. Increase in Security Posture: Improvement in security posture metrics such as increased scores on security assessment frameworks (e.g., OWASP) or compliance with regulatory requirements.
3. Patch and Remediation Rate: Measurement of the rate at which identified vulnerabilities are patched or mitigated, indicating the organization's responsiveness to security issues.
4. Customer Confidence: Feedback from customers, partners, or stakeholders indicating increased confidence in the organization's security practices and trustworthiness.
5. Compliance Adherence: Confirmation of adherence to regulatory requirements and industry standards through successful audits or assessments post-testing.
6. Cost Savings: Calculation of potential cost savings derived from mitigating vulnerabilities proactively compared to the potential costs of a security breach.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management approach included timely and regular meetings with the development team, ensuring effective collaboration and understanding of security issues. Critical vulnerabilities were promptly reported, prioritized, and remediated with high priority, accompanied by detailed technical guidance.

Communication was thorough, explaining findings comprehensively in both technical terms for IT specialists and layman language for broader understanding across the organization. This ensured clarity on the severity and implications of vulnerabilities, facilitating informed decision-making and swift action to mitigate risks effectively.

What was your primary form of communication with Ownux Global?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most about this company was their exceptional blend of friendly support and patience, particularly noteworthy when delays occurred on our end. Their willingness to accommodate and maintain a collaborative approach despite challenges demonstrated a genuine commitment to our project's success. This supportive attitude fostered a productive environment where our team felt comfortable seeking guidance and resolving issues promptly and effectively. 

Their dedication to delivering high-quality results while prioritizing positive relationships made them a standout partner in our cybersecurity efforts

Are there any areas for improvement or something Ownux Global could have done differently?

I found Ownux Global to be truly impressive across all aspects of their service. Their strong technical knowledge, unwavering support, and patient approach, even when delays were on our end, were exemplary. I couldn't identify any areas where they could have done things differently—they delivered a consistently outstanding experience