REDTEAM.PL

BACKGROUND

Please describe your company and position.

I am the Head of Engineering at Unleash live.

Describe what your company does in a single sentence.

We apply real-time AI analytics on any camera feed to produce meaningful insights so that humans can make better faster decisions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire REDTEAM.PL to accomplish?

Infrastructure penetration testing

SOLUTION

How did you find REDTEAM.PL?

Online Search

Why did you select REDTEAM.PL over others?

• High ratings
• Great culture fit
• Good value for cost

How many teammates from REDTEAM.PL were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

REDTEAM.PL was commissioned to carry out a security review of the Unleash Live web application and the cloud infrastructure.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The company has successfully concluded a series of penetration tests, uncovering several notable security insights within our cloud and web application infrastructure, particularly regarding business logic vulnerabilities. The thoroughness and clarity of the work conducted were highly commendable, matched by the precision and effectiveness of the communication and reporting throughout the process.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management aspect of the penetration tests was exemplary. All deliverables were provided punctually, adhering strictly to the agreed-upon timelines. The team demonstrated a high level of responsiveness to our needs, ensuring that all aspects of the project were aligned with our objectives and expectations.
What was your primary form of communication with REDTEAM.PL?

Email or Messaging App
What did you find most impressive or unique about this company?

What stood out most impressively about this company was their profound expertise in identifying vulnerabilities within cloud infrastructure. Additionally, their ability to extensively examine our app's business logic with minimal guidance or assistance was noteworthy. This demonstrated a high level of competence and self-sufficiency in their approach to cybersecurity.

Are there any areas for improvement or something  REDTEAM.PL could have done differently?

One suggestion would be to include an option for easy retesting of the findings. This would provide an efficient way to verify that any issues identified during the initial tests have been effectively resolved, thereby enhancing the overall value and thoroughness of the service provided.

BACKGROUND

Please describe your company and your position there.

Our company is a technology partner of a medical information platform with a goal to make the healthcare information accessible and clear for more people.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire REDTEAM.PL?

We hired Redteam.pl to conduct penetration testing and security audit of the platform. We wanted them to identify any possible security issues and propose ideas how to fix them.

SOLUTION

How did you select this vendor and what were the deciding factors?

We analyzed the offers of several company. Readteam.pl's offer was very well structured, they were very flexible and answered very fast to the questions. Their credentials are solid and have very good referrals from previous customers.

Describe the project in detail and walk through the stages of the project.

After we identified the partner we signed a contract. After that we provided the necessary credentials so they can access our environment. We also gave a brief explanation of the platform architecture and the available services. Then Redteam started their testing activities. During the testing period they reached us several times to clarify some access rights. Overall they were acting on their own and didn't spend a lot of our time. When they were ready they prepared and provided to us a very detailed report with the identified issues and the proposed solutions. They included detailed information about the qualification of every issue and how they managed to reach the result.

How many resources from the vendor's team worked with you, and what were their positions?

There two people from Redteam.pl who worked with us. Their position was Cyber Security Experts. During the contract negotiation phase there was involved a person from the sales team.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

As the project is about cyber security, we are not willing to share details. However, the report that Redteam.pl was very comprehensive and described the issues from several aspects. It was very easy to read and comprehend what exactly is the issue. They were also available for further clarifications upon our request.

How effective was the workflow between your team and theirs?

Redteam.pl raised their questions on timely manner and were available to clarify the exact issue so we can address it fast. We were communicating mainly through e-mail which was good because we are different time zones. The kick-off meeting was in video call.

What did you find most impressive or unique about this company?

They didn't need a lot of explanations in order to grasp the context of our product. The result of their efforts was very detailed and showed a very good understanding of the product.

Are there any areas for improvement or something they could have done differently?

The period of the testing was structured as black box for us. Probably we would be happy if there were intermediate checkpoints to assure us that everything is on track. However the final report showed us that there was no reason to be worried with the progress.

BACKGROUND

Introduce your business and what you do there.

I’m the information security officer at a retail company — Jerónimo Martins.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with REDTEAM.PL?

We updated the web service available to our employees and wanted to ensure it was secure.

SOLUTION

What was the scope of their involvement?

REDTEAM.PL devised and conducted a penetration test. We provided them access to accounts to enact realtor test authorization as employees. They also examined the authentication features. Their team performed two levels of testing: one with credentials and one without credentials. The goal was to find and review any vulnerabilities.

What is the team composition?

I was in contact with Adam (Principal Consultant & Co-Founder) and Pawel (IT Security Consultant & Co-Founder).

How did you come to work with REDTEAM.PL?

My colleague found them through a conference and then recommended them.

How much have you invested with them?

We spent around zł10,000 Polish Zlotys (approximately $2,500 USD).

What is the status of this engagement?

We worked together in February 2021. The project only took about one week.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Our team was satisfied with REDTEAM.PL’s tests, which their team created for us. They provided information the same week that their team completed the tests. We then solved the issues and implemented the required patches.

How did REDTEAM.PL perform from a project management standpoint?

In the beginning, we communicated through meetings. Later, we connected by email.

What did you find most impressive about them?

What REDTEAM.PL identified for us was quite important, and we solved all the issues because of their work. I was happy.

Are there any areas they could improve?

No, there’s nothing that could have been improved. It was ultimately a basic solution for a typical website. They didn’t have the occasion to provide us with a high-level specialty.

BACKGROUND

Please describe your company and your position there.

Accor (former Orbis) is one of the biggest hospitality companies in Eastern Europe. My role is to drive IT Security function in the respective region.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire REDTEAM.PL?

Organisation should test it's resilience against cyber attacks per PCI DSS requirements. This is to ensure clients' sensitive data is safe against theft.

What were your goals for this project?

The goal was to test cyber resilience of public facing infrastructure, as well as internal network segmentation and layered security once broken into infrastructure (excl. denial of service).

SOLUTION

How did you select this vendor?

Company has been chosen, based on its experience, members recognition in IT Security community as well as based on overall feeling of engagement and tailor-made approach to client needs.

Describe the project in detail.

Per below answers: The goal was to test cyber resilience of public facing infrastructure, as well as internal network segmentation and layered security once broken into infrastructure (excl. denial of service). Cannot give more details given the sensitive topic. In addition, Team performed red teaming aimed to test security awareness of organisation employees.

What was the team composition?

There were two people performing various parts of the assessment. One person was also project manager on vendor side.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Assessment was done in line with previously agreed scope. Some elements couldn't be done due to internal constraints on client side. Testing was perceived effective as it focused on the most efficient ways to bypass security controls. Cannot share more details due to sensitive matter of the project.

How effective was the workflow between your team and theirs?

Communication was very efficient and effective, we had an ongoing discussion on any topics required. Post-assessment stage including reporting was also very fast.

What did you find most impressive about this company?

I appreciate their tailor-made approach towards the client, listening to needs whilst also proposing better approach based on vendor experience. The big advantage of vendor is "questioning status quo".

Are there any areas for improvement?

Cannot find anything requiring improvement.

BACKGROUND

Please describe your company and position.

I am the Founder of Glue Network (glue.net)

Describe what your company does in a single sentence.

Glue blockchain

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire REDTEAM.PL to accomplish?

• web 3 penetration testing
• web 2 penetration testing

SOLUTION

How did you find REDTEAM.PL?

Referral

Why did you select REDTEAM.PL over others?

• Pricing fit our budget
• Good value for cost
• Referred to me
• time frame, prior work was great

Describe the scope of work in detail. Please include a summary of key deliverables.

We had a tight deadline to complete a security assessment on our web application. Their team did web3 and web2 penetration testing for us.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

There was a project report created that explained the issues we had.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They were very much on time and very responsive.

What was your primary form of communication with REDTEAM.PL?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

I think they have a commitment to getting the job done very well rather than rushing it, but they were also willing to put extra time in to get this done for us on a time schedule since we were launching very soon.

Are there any areas for improvement or something REDTEAM.PL could have done differently?

I really have 0 complaints about our experience.

BACKGROUND

Please describe your company and position.

I am the Founder of Agora Labs Ltd

Describe what your company does in a single sentence.

We facilitate MiCA compliant token sales

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire REDTEAM.PL to accomplish?

• Ensure our backend is bug free and secure

SOLUTION

How did you find REDTEAM.PL?

Through our product

Why did you select REDTEAM.PL over others?

• Great culture fit
• Company values aligned

How many teammates from REDTEAM.PL were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• A Pen test on our 3 platforms: 
  • User facing app
  • Project facing app
  • Admin facing app

The deliverable was a report of findings

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We fixed some vulnerabilities based on their work and report.  

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they were great with their workflows.

What was your primary form of communication with REDTEAM.PL?

Email or Messaging App

What did you find most impressive or unique about this company?

They are really professional and talented at what they do. 

Are there any areas for improvement or something REDTEAM.PL could have done differently?

No, they were super good. 

BACKGROUND

Please describe your company and your position there.

I'm a security architect working for a software development company that provides a web-based SaaS platform to companies to automate their data privacy compliance operations.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire REDTEAM.PL?

I was looking for an independent 3rd party cybersecurity firm to perform an external penetration test of our SaaS platform. External pen tests are a compliance obligation.

SOLUTION

How did you select this vendor and what were the deciding factors?

I chose Red Team because of their positive feedback from prior customers, their swift and accurate response to my enquiry, and their reasonably priced services.

Describe the project in detail and walk through the stages of the project.

Red Team performed a penetration test of our platform and identified multiple vulnerabilities. They delivered a report at the end of their testing listing the vulnerabilities, their severities, proofs of concept for reproduction, and remediation advice.

How many resources from the vendor's team worked with you, and what were their positions?

Two resources, both pen testers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Red Team identified a vulnerability that had not been identified by TWO previous penetration testing firms.

How effective was the workflow between your team and theirs?

Communication was excellent throughout, particularly when discussing vulnerabilities discovered during testing (they did not wait until the report was written if they were concerned that a vulnerability needed to be remediated immediately).

What did you find most impressive or unique about this company?

Their professionalism, expertise and communication.

Are there any areas for improvement or something they could have done differently?

I can't think of anything.

BACKGROUND

Please describe your company and your position there.

I am ISO in Allianz Poland

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire REDTEAM.PL, and what were your goals?

We were looking for vulnerabilities and gaps in our infrastructure environment

SOLUTION

How did you select this vendor and what were the deciding factors?

Based on RFI and RFP conducted by our Procurment dep. We chose this vendor because of its expirience and knowladge

Describe the project in detail and walk through the stages of the project.

Black and grey box penetration test were conducted

How many resources from the vendor's team worked with you, and what were their positions?

We had project manager, security analist and penetration testers

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to demonstrate gaps and vulnerabilities, our internal automated test was not.

How effective was the workflow between your team and theirs?

Their workflow was very effective.

What did you find most impressive or unique about this company?

Most impressive and unique was that they could share their knowledge and experience also to the non-technical people

Are there any areas for improvement or something they could have done differently?

Nope

BACKGROUND

Please describe your company and your position there.

I am the VP of Engineering

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire REDTEAM.PL?

To perform a Red Team cyberattack on the company. This was full spectrum covering people and systems with no restrictions on methods to be used.

What were your goals for this project?

To obtain specific data from our database

SOLUTION

How did you select REDTEAM.PL?

I had discussions with two other vendors, both of whom submitted quotes for the work. Selection was based on two factors, the first was cost Red Team were extremely reasonable, secondly the profile and standing of the principles within the security community.

Describe the project in detail.

The attack took place over a three week period and involved a number of individuals from Red Team. Only a small number of people within our company were made aware of this to keep responses as realistic as possible.

What was the team composition?

I believe at least four people were involved from RT's side.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were unable to achieve the goal set (which is good) and provided a detailed report of the process undertaken along with recommendations for our us to take where we might improve or strengthen processes.

How effective was the workflow between your team and theirs?

Communication was mostly via Signal although we did have at least one Zoom call. Everything was clear and well communicated.

What did you find most impressive about this company?

Even though they did not succeed in accessing our data, they were able to obtain information about our software and the techniques they used were very effective.

Are there any areas for improvement?

No