Red Spider Security

Please describe your company and your position there.

Metrical is a software company focused on delivering AI and ML services to retailers to predict site bounces and cart abandonment. I am the CEO and founder of the company.

For what projects/services did your company hire Red Spider Security?

In working with a large, multi-national prospect, we needed to ensure that our systems were appropriately hardened and configured.

How did you select this vendor and what were the deciding factors?

Google search and found the Red Spider website.

Describe the project in detail and walk through the stages of the project.

Custom application was scanned for vulnerabilities and then pen tested to determine whether they were exploitable. Network scans were performed to determine what vulnerabilities were on the primary internal network and then pen tested. Discovered several vulnerabilities within the application but were not exploitable. Provided guidance to appropriately remediate and then rescanned for clean results. Discovered vulnerabilities on the internal network and provided guidance to remediate. Rescanned the network for clean results.

How many resources from the vendor's team worked with you, and what were their positions?

One. He was the primary security pen tester for Red Spider.

Can you share any outcomes from the project that demonstrate progress or success?

We were able to have a successful vulnerability scan and possible weaknesses were identified. We resolved those matters and a secondary pen test concluded we'd achieved our security requirements.

How effective was the workflow between your team and theirs?

Very. Good communication and timely.

What did you find most impressive or unique about this company?

Red Spider was very professional and completed the project in the time specified. Communication was solid.

Are there any areas for improvement or something they could have done differently?

None

Please describe your company and your position there.

I’m the Marketing Manager for Focusteck. We provide full-stack digital services to our customers.

For what projects/services did your company hire Red Spider Security?

We developed an app for one of our customers, and they wanted a report of its security and vulnerabilities from a third party

How did you select this vendor and what were the deciding factors?

We found Red Spider Security while we were searching on google. We felt they were the best choice out of the companies we considered, and they met our customer’s location requirements.

Describe the project in detail and walk through the stages of the project.

Red Spider Security conducted a cybersecurity audit on our client’s app. They provided a report from their first test which showed the vulnerabilities they found. They also worked with our internal development team and made recommendations on how to solve the vulnerabilities they identified. Once we followed their recommendations, they ran a second test on our client’s app to ensure that there were no vulnerabilities left.

How many resources from the vendor's team worked with you, and what were their positions?

2 engineers were performing the Cybersecurity audit and the Project Manager, who was in direct communication with us and updating in timely manner.

Can you share any outcomes from the project that demonstrate progress or success?

We were quite surprised that they were able to find many vulnerabilities, but because of them, we were able to save money for our clients and see good results. The app quality also improved because of their testing efforts. Overall, we appreciated the services they offered, and we would be interested in partnering with them again in projects such as our semi-annual application testing efforts.

How effective was the workflow between your team and theirs?

They provided simple and clear communication, and they worked in a timely manner. They finished the first phase of the audit or testing in roughly 3 weeks and the 2nd phase was completed within 4 weeks. We used email and Google Meet to communicate and everything was well documented and managed

What did you find most impressive or unique about this company?

We are really grateful for their quick responsiveness and sensitivity to customer needs. Compared to the work we had with other companies, we had a much better experience with Red Spider Security.

Are there any areas for improvement or something they could have done differently?

We are satisfied with the results.

Please describe your company and your position there.

President of Barry N. Rein & Associates, Inc. Financial Institution Consultants specializing in Regulatory Compliance.

For what projects/services did your company hire Red Spider Security?

Barry N. Rein & Associates, Inc. engaged Red Spider Security to perform a comprehensive assessment of a Global Financial Institution's Information Technology Library of Policies and Procedures which included the Institutions Information Security Program.

How did you select this vendor and what were the deciding factors?

Red Spider Security came highly recommended to our firm from a nationwide Accounting Firm. Red Spider Security's extensive knowledge of Information Technology as well as Information Security Systems made our engagement an easy decision.

Describe the project in detail and walk through the stages of the project.

Red Spider Security was engaged to perform a top to bottom reivew of a Global Financial Institutions Information Technology Library of Policies and Procedures to assess compliance with Federal Reserve Regulatory Requirements. Upon completion Red Spider Security provided in detail recommendations for enhancements to meet and exceed Regulatory Requirements.

How many resources from the vendor's team worked with you, and what were their positions?

Barry N. Rein & Associates worked exclusively with Red Spider Security's founder and President Mr. Azim Sheikh.

Can you share any outcomes from the project that demonstrate progress or success?

Red Spider Security's expertice and substantial knowledge of the regulatory requirements of Financial Institution's Information Technology Library of Policies and Procedures, our mutual client was able to enhance their existing framework to meet and exceed the expectations of the Federal Reserve Bank therefore successfully passing the Bank's regulatory examination.

How effective was the workflow between your team and theirs?

Red Spider Security worked hand in hand with my staff as well as our mutual client even scheduling virtual meetings after hours to complete assignments where necessary.

What did you find most impressive or unique about this company?

Barry N. Rein & Associates, Inc. found Red Spider Security's elite level of expertise to be second to none. Their experience and hands on approach created a smooth assessment process and provided comfort to our client that the right consultants were on the job.

Are there any areas for improvement or something they could have done differently?

We have no recommendations for improvement, only wish to work together on more projects in the future. Overall we found Red Spider Security to be a professional and detail oriented IT Consulting Firm.

Please describe your company and your position there.

We are a professional services consulting company and my group specializes in cybersecurity related projects. I'm a Principal in the practice and lead all our cyber projects.

For what projects/services did your company hire Red Spider Security?

We needed specialized security skills related to banking specifically. Red Spider had the perfect skill set for this.

How did you select this vendor and what were the deciding factors?

Competence in specific industry. Years of experience and professionalism.

Describe the project in detail and walk through the stages of the project.

They performed virtual CISO activities and compliance walkthroughs for a foreign banking client. The project assisted the banking client into entering the US banking space and ensure compliance for federal mandates related to security and compliance.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with one, as a principal in the organization.

Can you share any outcomes from the project that demonstrate progress or success?

They successfully navigated a difficult client into the US banking regulation. This included foreign language challenges and assisting in teaching the client as well on the specifics of US banking requirements.

How effective was the workflow between your team and theirs?

Excellent. Their professionalism shined through and we successfully completed the project and will likely get additional work based upon this success.

What did you find most impressive or unique about this company?

We were impressed with their professionalism, responsiveness, and dedication to providing great services.

Are there any areas for improvement or something they could have done differently?

It was a great project and we would use them again!