Sekurno

BACKGROUND

Please describe your company and position.

I am the CTO of Key2XS

Describe what your company does in a single sentence.

We build a middleware platform that manages access rights – pulling from an organization's authoritative source and making sure a person or system can only reach what they're actually authorized for. We sell mostly through larger technology partners rather than direct.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Independent testing before release
• Meet our ISO audit requirements
• Proof of security for our clients and partners

SOLUTION

How did you find Sekurno?

Referral

Why did you select Sekurno over others?

Good value for cost

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Sekurno ran a full white-box penetration test, including a code review across our API surface, backed by a threat modeling exercise. We gave one of their testers access to our source code and repositories, and they kept us updated throughout, flagging anything that needed attention as soon as it came up rather than waiting for a final report. The engagement wrapped with a full report, a retest once we'd made fixes, and confirmation that our data had been securely destroyed afterward – without us having to ask. Deliverables: threat model, final report, retest results, and a data-destruction confirmation letter.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

he biggest outcome is confidence – we now have independent confirmation that our platform was tested thoroughly by people who know what they're doing, not just our own assumption that things were fine. That gave us real peace of mind going into our ISO audit and our release. It also directly improved the quality of our platform, since we acted on everything they raised before going further. Being able to say a third party rigorously tested us is also something we can now point to with our own clients and partners.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, delivered on time. They were flexible when our audit-driven schedule shifted, and clear from the start about what they could and couldn't commit to timeline-wise, which mattered – other vendors we'd talked to were vaguer on scheduling. Communication throughout was responsive and easy to work with.

What was your primary form of communication with Sekurno?

Virtual Meeting

What did you find most impressive or unique about this company?

That we got an actual team – people focused on threats, people focused on code, multiple angles covered at once – not one contractor quietly handling everything alone, which is what we suspected was happening with some other vendors we evaluated. That, combined with them being upfront about price, process, and team structure from the proposal stage, is why we chose them.

Are there any areas for improvement or something Sekurno could have done differently?

One thing worth mentioning: the deliverables could use a middle ground. Right now there's a detailed technical report with executive summary and a one-page attestation letter, but nothing in between we can hand to our own leadership or share externally without heavily editing the full report ourselves. An executive summary aimed at that audience would close the gap

BACKGROUND

Please describe your company and position.

I am an executive at T-Pro

Describe what your company does in a single sentence.

T-Pro provides AI-powered clinical documentation and speech recognition software that automates medical transcription and digital dictation to help healthcare professionals save time and streamline workflows.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• In-depth system security analysis
• Adhering to compliance requirements

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• High ratings
• Good value for cost
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The project began with a comprehensive analysis of our platforms – Sekurno's team studied our documentation and prepared the foundation for a well-scoped engagement. Once the project was approved, their team communicated with us through Slack and consistently provided updates on what was being tested and whether there were any blockers. Their team was extremely professional, responsive, and easy to work with throughout.

Deliverables included a full penetration testing report and threat modeling, which gave us a much clearer picture of our risk areas than we'd had before. Because we wanted testing that reflected real-world conditions, we had Sekurno test against our production environment. During one test, an AI-enabled testing step behaved more aggressively than expected and caused brief service disruption. Sekurno's team responded immediately, shared full logs, and worked with us through the resolution – which gave us real confidence in how they operate when something doesn't go exactly to plan.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Sekurno put us in a considerably better security position by comprehensively verifying every part of our system and surfacing a number of valuable findings that helped us improve our security posture. Their deliverables – the penetration test report and threat modeling in particular – clearly demonstrated the depth of their approach and gave our team concrete, actionable items to work from.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sekurno was consistently responsive, professional, and delivered on the timelines we agreed to. Communication ran primarily through Slack, where their team gave us regular status updates and flagged anything that needed our input right away rather than letting it sit. Whenever we had questions or needed to adjust scope, they were quick to respond and easy to work with – the kind of ongoing engagement that made this feel like a partnership rather than a one-off vendor relationship.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their professionalism stood out most. At one point during the engagement, we remarked internally that we finally felt like we were dealing with professionals. Beyond that, the depth of their technical understanding and the added threat modeling work went beyond what we'd typically expect from a penetration testing engagement.

Are there any areas for improvement or something Sekurno could have done differently?

The one thing we'd ask for going forward is a more condensed, non-technical executive summary alongside the detailed technical report – something we can share with external stakeholders or leadership who don't need the full technical depth but want a clear picture of where things stand.

BACKGROUND

Please describe your company and position.

I am the Senior Site Reliability Engineer of Triple Technologies Ltd

Describe what your company does in a single sentence.

Data enrichment and AI agents built specifically for financial services. Provide a better banking experience and streamline your banking operations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Ensure the security of our platform.
• Meet security audit and compliance requirements
• Improve overall confidence in our platform's security

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• High ratings
• Close to my geographic location
• Great culture fit
• Good value for cost

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

* Introductory meeting – We introduced our business, products, and security requirements, while Sekurno explained their engagement process and communication approach.
* Technical meeting - We reviewed our technical stack, architecture, and platform-specific details.
* Penetration testing execution – Sekurno performed the assessment and kept us informed with regular progress updates and preliminary findings.
* Reporting phase – We reviewed and discussed the findings together, refining them from both technical and business perspectives.
* Retest phase – After we remediated the identified vulnerabilities, Sekurno conducted a second round of testing to verify that all findings had been successfully resolved.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Sekurno identified vulnerabilities, prioritized them by severity, and provided detailed technical explanations together with clear remediation guidance. Their report enabled our development team to understand, reproduce, and resolve the findings efficiently, allowing us to address the issues in a short timeframe.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sekurno assigned a dedicated project manager who served as our single point of contact throughout the engagement. Communication was clear, timely, and well organized. The project manager was responsive and understood our requirements well, and the entire project was completed within the expected timeframe.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Sekurno impressed us with their ability to quickly understand our platform and its architecture. They surfaced issues that our previous testing provider had missed entirely — a clear sign their testing goes deep rather than skimming the surface, which is exactly why we chose to work with them. Their communication was consistently clear and transparent throughout the engagement.

Are there any areas for improvement or something Sekurno could have done differently?

Our collaboration with Sekurno was efficient, professional, and productive from start to finish. We did not identify any specific areas for improvement.

BACKGROUND

Please describe your company and position.

I am the CEO & Co-Founder of OASYS NOW

Describe what your company does in a single sentence.

We build data infrastructure to make personalized health accessible for everyone, enabling secure, privacy-preserving connections between patients, healthcare providers, and researchers.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Third-party security validation
• Assurance beyond internal audits
• Preemptive compliance readiness

SOLUTION

How did you find Sekurno?

• Online Search
• Other

Why did you select Sekurno over others?

• High ratings
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired Sekurno to conduct our first-ever penetration test with the objective of verifying our security and privacy-by-design claims. As a company operating in the HealthTech space, we handle sensitive health data and have spent years building infrastructure with strong emphasis on privacy, including features like anonymized active linkage. We wanted a third-party assessment to validate these efforts and provide assurance to both internal stakeholders and future clients. Sekurno performed a white-box penetration test that covered our infrastructure and application layer. Deliverables included a comprehensive report with findings mapped to relevant standards, detailed remediation advice, and annexes showing exactly what was tested. The experience was highly collaborative and educational, which helped our technical and management teams better understand the security landscape and the value of independent audits.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The test confirmed that we had no high or critical vulnerabilities, which was a key indicator of success for us. The only findings were minor (low or medium), most of which were resolved immediately—some even before the final report was delivered. Sekurno’s structured output and clear documentation provided verifiable assurance that our development and operational practices were secure. This was not just helpful from a technical standpoint, but also served as valuable evidence for internal and external stakeholders who need confidence in our platform’s integrity.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was smooth from start to finish. We had specific deadlines for the penetration test and follow-up reporting, all of which Sekurno met without issue. Communication was primarily through Slack, which made it easy to include multiple stakeholders and resolve questions quickly. What stood out was how Sekurno took the time to explain each part of the process—not just what we needed to do, but why it mattered. This was extremely helpful for us, especially as this was our first formal engagement of this type. It felt like a true partnership rather than a transactional vendor relationship.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Sekurno’s deep focus on the biotech and healthtech sectors truly stood out. They didn’t just bring generic cybersecurity knowledge—they understood our industry’s context, challenges, and regulatory landscape. It was clear they had done their homework and genuinely cared about the impact of our work. This alignment in mission and values made collaboration seamless. We also appreciated their passion for real security, beyond just checking the boxes. For companies like ours that handle sensitive data, this kind of focus is not just refreshing—it’s essential.

Are there any areas for improvement or something Sekurno could have done differently?

The main friction point was setting up a secure environment without exposing our production systems. It would have helped to receive upfront guidance or best practices on managing access, especially around domain restrictions and two-factor authentication. A short prep guide would make this process smoother for future clients.

BACKGROUND

Introduce your business and what you do there.:

 I’m Mads, the CTO at Kaunt.

Kaunt provides an AI-driven account coding engine that automates the invoice account coding process, enabling greater efficiency and accuracy in finance operations. We are based in Denmark and operate in a high-trust environment with enterprise clients. As such, we prioritize strong security practices and strict compliance with industry standards such as ISO and SOC 2. Our goal is to maintain trust and credibility by demonstrating a mature and proactive approach to security.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address?
As a company operating in the finance and AI sectors, we needed to demonstrate that our systems were secure and compliant with industry standards like ISO and SOC 2. This was not only a compliance requirement but also a strategic need to earn the trust of large enterprise clients who carefully assess the security posture of their partners.

We hired Sekurno with two key objectives in mind.

First, we wanted a professional penetration test that would go beyond a standard checklist and offer in-depth insights into our systems. We needed a testing partner who would not just validate our security but help us improve it.

Second, we were looking for peace of mind across the organization. This included our engineering team, our leadership, and our salespeople who are often asked to provide proof of security to prospects. The ability to show a rigorous test report and explain how we responded to findings was important to our credibility.

This was our second engagement with Sekurno. After being impressed by their work in the first year, we expanded the scope this time to include more systems and infrastructure.

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

What was the scope of their involvement and team dynamic?

 This year, the scope of Sekurno’s work increased significantly. Initially, we focused on backend services, but for this engagement we included the frontend and key parts of our infrastructure as well. The idea was to cover all critical components of our application.
The engagement started with threat modeling sessions, where we worked together to define which areas needed testing and how the testing should be prioritized. This helped us build a more structured and thoughtful security review process.
The team at Sekurno was highly collaborative and technically skilled. One of the things we appreciated the most was having direct conversations with the actual penetration testers. This allowed us to go deeper into the findings and understand the context behind each issue. It was a much more technical and valuable interaction than dealing with general project managers.
A new and very effective improvement this year was the use of a dedicated Slack channel. Communication was fast and fluid, similar to how we work internally. This helped speed up discussions, reduce delays, and made the whole process feel more integrated.

What's the status of this engagement?

The formal penetration testing engagement has been completed, but our collaboration with Sekurno continues. We now involve them whenever we have questions related to security, even when it comes to other companies within our group. They’ve become a trusted partner we can rely on not only for testing but also for general guidance on security architecture, tooling, and best practices.

RESULTS & FEEDBACK

How did your relationship with your partner evolve?

 Our relationship with Sekurno has grown from a trial engagement into an ongoing partnership. In the first year, we wanted to see how they worked and whether the collaboration would add value. Based on the quality of their findings and their collaborative approach, we've chosen to continue working with them.

This year, we were able to share part of the penetration testing report with some of our enterprise clients. Their response was very positive. A few even commented that “these guys know what they’re doing,” which helped us build trust and credibility. The depth and clarity of the testing helped us demonstrate that we are serious about security and that we invest in it not just for compliance, but because it matters to our business and our customers.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

In what ways can they improve?

 Overall, the engagement was excellent. If there is one area for improvement, it would be to provide more proactive updates during the testing phase. Even short status messages could help give more visibility into the timeline and reassure the client that everything is on track. This is especially valuable when working with tight deadlines.

What advice do you have for clients with similar needs to yours?

 If you are going to invest in penetration testing, make sure it is more than just a formality. Work with a partner who helps you learn something from the process and improves your actual security. With Sekurno, we received useful feedback and our team became more security aware as a result.

Also, provide the testers with all the information they need from the beginning. The better the context they have, the more precise and efficient the testing will be. That way, you get real value from the engagement and not just a report to satisfy compliance requirements.

UPDATED REVIEW

This review was published on 02/06/2024

Mads Ellersgaard Kalør
CTO, Kaunt A/SInformation technology

Arhus, Denmark

1-10

Jan 2024 - Jan 2024

$10,000 to $49,999

Verified

Project summary
An IT company hired Sekurno to provide cybersecurity services. The team fulfilled compliance requirements and conducted penetration testing and security risk penetration for the client.

Feedback summary
Thanks to Sekurno, the client met compliance requirements with a detailed and approved report. The team provided valuable security insights, delivered on time, hosted efficient meetings, and adapted to the client's requirements. Sekurno's thorough testing was crucial to the project's success.

BACKGROUND

Please describe your company and position.

 I am the CTO of Kaunt A/S

Describe what your company does in a single sentence.

We provide an AI driven account coding engine that automates the invoice account coding process.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Compliance Requirement Fulfillment
• Valuable Penetration Testing
• Security Risk Mitigation

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The project commenced with a thorough vendor research phase. We evaluated four offers, considering factors like price, urgency, and the specific nature of our requirements. Sekurno stood out due to their competitive pricing and a deep understanding of our needs, particularly with regard to compliance and penetration testing. 

During the pre-sale process, Sekurno distinguished themselves through efficient communication and a personalized approach. The contract and related documents were managed smoothly, a vital aspect given our tight deadlines. In the execution phase, Sekurno's team displayed professionalism and technical expertise. They provided clear guidelines on what was needed from our end, ensuring efficient use of resources. 

The engagement with our developers was particularly noteworthy, as Sekurno’s team was open and informative, facilitating productive discussions about security. The reporting was comprehensive and accessible. It detailed the penetration testing process and results, providing valuable insights into our security posture.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The project led to tangible outcomes that significantly impacted our business. Firstly, it enabled us to meet our compliance requirements with a detailed and approved report, reassuring our customers and partners about our security measures. 

Secondly, the penetration testing provided invaluable insights, identifying vulnerabilities in our code, which enhanced our overall security. This process also boosted our development team's confidence, validating the security of their work and providing an external perspective on areas for improvement. The thoroughness of Sekurno's testing and their ability to go beyond mere compliance checks significantly contributed to the project's success.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sekurno’s project management was exemplary. Despite a short timeline, they delivered the report on schedule and ensured all processes were aligned with our needs. Communication was efficient, and the number of meetings was optimal, avoiding unnecessary time expenditure. 

The team was always reachable and responsive, adapting seamlessly to our requirements. The involvement from our side was minimal, mainly overseen by myself, which speaks to Sekurno’s ability to manage projects independently and effectively.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The most impressive aspect of Sekurno was their commitment to providing more than just a compliance service. They showcased a deep understanding of security risks and a dedication to thorough testing, distinguishing themselves from other vendors who might focus solely on compliance. 

This approach, coupled with their transparent and down-to-earth communication style, made them stand out. Their ability to convey technical details effectively and engage in meaningful discussions about security was particularly noteworthy.

Are there any areas for improvement or something Sekurno could have done differently?

A minor area for improvement would be in communication during the testing phase. Providing a more proactive and frequent update on the progress, perhaps through brief emails, would enhance the overall client experience, especially when working under tight deadlines. This would offer reassurance and a clearer view of the project timeline, ensuring that clients are continually informed about the stages of testing and any developments.
Overall rating:    5

Quality:    5

Cost:    5

Schedule:    5

Willing to refer:  5

BACKGROUND

Please describe your company and position.

I am the Software Developer of Coreway

Describe what your company does in a single sentence.

Coreway.de develops a health app that predicts flare-ups for chronic inflammatory bowel diseases like Crohn’s and colitis, empowering patients with personalized tools and nutrition guidance to manage their condition and improve quality of life

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• MDR compliance
• Increased security
• Peace of mind

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired Sekurno to perform a penetration test primarily to meet MDR (Medical Device Regulation) compliance requirements. We discovered them on Clutch where they were highly rated. From the first meeting, they stood out with their ability to recall and understand even the smallest details about our product. Their communication was clear and efficient, with a detailed roadmap and rationale for each testing step that other vendors failed to provide.

Throughout the project, Sekurno was autonomous and efficient, working with minimal input and still delivering quality results. The key deliverables included a penetration testing report, threat modeling, and a checklist of all tests performed. These gave us full transparency and assurance that the process was thorough and legitimate. They also clearly explained vulnerabilities and how to remediate them during a Q&A session, which was especially helpful for us since we’re new to backend, web, and mobile security.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Delivered everything within the agreed timeline
Discovered vulnerabilities we didn’t anticipate
Increased our peace of mind regarding the security posture
Gained a better understanding of what’s essential for compliance
Clear documentation and threat modeling ensured transparency

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was excellent. Sekurno delivered everything on time and proactively kept us updated through Slack. Kristina, who managed our communication, did a great job of keeping things clear and organized. We always knew the status by the end of each week and the team was always responsive

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out about Sekurno was their ability to work independently and efficiently. They quickly understood our product with minimal input, unlike other vendors who required extensive explanations and forms. Their strong domain knowledge in HealthTech and clear, purpose-driven approach to testing gave us confidence. We didn’t need to micromanage—they simply understood what mattered and delivered.

Are there any areas for improvement or something Sekurno could have done differently?

A minor improvement could be adding a real-time progress tracker, especially for projects with tight deadlines. This would help alleviate trust concerns during periods without updates. While not necessary, it could enhance transparency and provide peace of mind earlier in the process.

BACKGROUND

Please describe your company and position.

I am the Engineering Manager of Usersnap

Describe what your company does in a single sentence.

Usersnap is a feedback and bug tracking tool that allows users to report issues directly from within a web application using annotated screenshots and comments.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Compliance assurance
• Identify hidden vulnerabilities
• Prove security to enterprise clients

SOLUTION

How did you find Sekurno?

Referral

Why did you select Sekurno over others?

• Good value for cost
• High quality work

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We engaged Sekurno for a penetration test of our web application based on a strong referral. During our initial call, we discussed different testing approaches, clarified deliverables, and aligned on the scope. We proceeded with the whitebox solution as we saw a higher effectiveness in finding security vulnerabilities. 

One of the standout moments was when we were asked to deliver a detailed walkthrough of our platform to help Sekurno understand the business logic and threat landscape in our specific industry.

Key deliverables included:

• A comprehensive final security report
• Threat Modeling
• Registry of all tests performed
• A leaked credentials check
• A revised report after follow-up discussions on impact levels

We appreciated that Sekurno went beyond surface-level checks and found issues that had been overlooked in previous assessments. The report was high quality and has already been useful in conversations with our enterprise partners.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• We were reassured to see that no critical, customer-impacting issues were found.
• The audit still uncovered previously unknown issues of varying severity, reinforcing the depth of the testing.
• The mitigation guidance included in the report was actionable and helpful.
• We’ve successfully used the report to demonstrate our security posture to partners.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was smooth and reliable. Aside from a minor rescheduling request (which was clearly communicated in advance), everything was delivered on time. We received weekly updates, and communication was responsive throughout. The project manager handled logistical questions efficiently, while the technical lead was available when deeper details were needed. We appreciated the transparency and availability.

What was your primary form of communication with Sekurno?

Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed by how much information Sekurno requested before beginning the audit. The team clearly wanted to understand our application, business logic, and market-specific risks. This level of preparation gave us confidence that the audit would focus on relevant threats and not just standardized checks. 

Our CEO, who previously worked with security teams, also appreciated the depth and professionalism of the audit. Something she noted is not often seen in similar engagements.

Are there any areas for improvement or something Sekurno could have done differently?

To be honest, it’s difficult to point out a specific area for improvement, as the overall experience was very positive and everything went smoothly. If anything, the weekly updates could have been a bit more detailed by default—but I always felt that if I needed more information, the team was readily available and responsive. I was confident that I could reach out at any time to get a deeper view into where the project stood, which gave me a strong sense of transparency and control throughout the engagement.

BACKGROUND

Please describe your company and position.

I am the Head of Security of CloudLinux

Describe what your company does in a single sentence.

CloudLinux provides secure, optimized, and stable Linux-based operating systems and cybersecurity solutions for hosting providers and enterprises, enhancing server security, performance, and reliability.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Regular security assessments
• Compliance with Clients’ Requirements
• Improving security posture through deep testing

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our partnership began as part of a vendor procurement process. We shortlisted two companies and contracted both to perform security testing on the same scope, directly comparing their results. After the pilot project, Sekurno demonstrated significantly better performance. They identified security issues that we were already aware of internally but that no external vendor had previously detected. Their depth of analysis and accuracy in findings set them apart, leading us to select Sekurno as our preferred vendor.

Following this successful evaluation, we signed an annual contract with Sekurno, engaging them for penetration testing and regular vulnerability assessments.

The project delivered a comprehensive security assessment, including well-documented findings that were immediately actionable for our engineering team. The key deliverables included:

• Penetration testing report
• Documented Threat model
• A registry of all security tests performed

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The penetration testing engagement resulted in actionable security improvements, with vulnerabilities identified that were previously undetected by other vendors. The findings were well-documented, requiring minimal effort from the internal security team to validate and communicate with engineers, which streamlined the remediation process. Additionally, these penetration testing and vulnerability assessments satisfy our compliance requirements and clients’ requests for information regarding our security testing, ensuring transparency and trust in our security posture.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sekurno demonstrated strong project management skills, ensuring clear communication and adherence to timelines. The engagement was well-structured, with defined milestones and expectations. They were responsive to Cloud Linux’s needs, facilitating an efficient and productive collaboration. Their flexibility in providing necessary documentation and attestation letters further contributed to a smooth workflow.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Sekurno’s ability to deeply understand Cloud Linux’s infrastructure and uncover vulnerabilities that other vendors missed was particularly impressive. Their approach went beyond compliance-driven security checks, focusing on real security improvements. Additionally, their clear documentation and streamlined reporting process significantly reduced the internal team’s workload, making remediation more efficient.

Are there any areas for improvement or something Sekurno could have done differently?

While the project was highly effective, a potential improvement could be streamlining the process of requesting and receiving reports and attestation letters. Automating parts of this process, such as generating customized executive summaries, could further ease internal workflows. However, Sekurno’s responsiveness in addressing ad-hoc requests was already a strong point.

BACKGROUND

Please describe your company and position.

I am the Software developer of Daymi

Describe what your company does in a single sentence.

Daymi is a workflow software company that simplifies daily operations, controls, and oversight for businesses by consolidating tasks, procedures, and compliance processes into a single platform.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Improve internal security posture
• Find optimal security balance
• Demonstrate security maturity

SOLUTION

How did you find Sekurno?

Referral

Why did you select Sekurno over others?

Pricing fit our budget

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our company engaged Sekurno for a security assessment to evaluate our security posture and ensure alignment with industry expectations. As a small company, we aimed to find an optimal security balance—securing our environment while maintaining efficiency. 
The project involved an initial consultation phase to understand our systems and requirements, followed by technical assessments, penetration testing, and reporting.

Sekurno demonstrated flexibility in adapting to our setup, working within our existing environments rather than demanding separate testing environments, making the process more efficient. The deliverables included a detailed security report outlining vulnerabilities, risk levels, and recommendations. 
The level of detail in the findings was comprehensive, and while some aspects were highly technical, the report provided clear insights into our security posture. The engagement concluded with a follow-up retest to validate fixes and improvements.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Identified vulnerabilities and security gaps
• Improved understanding of security risks
• No high or critical vulnerabilities found, validating security practices
• Provided assurance to clients and prospects about security commitment
• Helped plan for future security improvements

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management was excellent. The Sekurno team was proactive in planning, setting clear expectations, and maintaining smooth communication. They provided timely updates, set clear milestones, and adhered to deadlines. Communication through Slack was seamless, and we appreciated their responsiveness to our needs. 
Although we occasionally delayed certain tasks on our side, the Sekurno team remained adaptable and ensured everything stayed on track. Overall, the delivery was on time, and their approach was professional and efficient.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

One of the most unique aspects of working with Sekurno was the cultural alignment between our teams. We found it easy to communicate with their team due to shared cultural and business values. Their team was technically proficient, highly detailed in their approach, and flexible in adapting to our constraints. 
The depth of the security report and the technical expertise demonstrated during discussions were also impressive. While we found some aspects of the report to be highly detailed, their overall thoroughness and dedication to security stood out.

Are there any areas for improvement or something Sekurno could have done differently?

One area for improvement would be the presentation of vulnerability reports. While the reports were detailed and informative, adding more practical context on the likelihood of exploitation could help prioritize fixes more effectively. For example, providing insights on how often similar vulnerabilities have been exploited in real-world scenarios or the cost-efficiency of addressing specific risks would be valuable. 
Additionally, emphasizing the significance of criticality levels in a more user-friendly way could enhance decision-making for non-technical stakeholders.

BACKGROUND

Please describe your company and position.

I am the CTO of Makini Inc

Describe what your company does in a single sentence.

Makini provides a unified API for industrial systems, enabling seamless data integration across CMMS, EAM, and WMS platforms. This API simplifies connectivity, allowing tech companies to access and manage data from diverse systems (like Oracle and SAP) through a single, consistent interface 

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Sekurno to accomplish?

• Security posture improvement
• Compliance alignment (SOC 2, security standards)

SOLUTION

How did you find Sekurno?

Online Search

Why did you select Sekurno over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Sekurno were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our company engaged Sekurno for a second consecutive year to conduct a comprehensive white-box penetration test of our core products, the Makini API and our Developer Portal. Sekurno’s process began with an initial setup phase, where we collaborated on the project scope, provided access to source code, and outlined testing parameters. The scope included assessing our API gateway platform’s vulnerabilities and ensuring our compliance posture was secure.

Sekurno’s deliverables were thorough and impactful, with an in-depth penetration testing report that identified specific vulnerabilities, attack vectors, and detailed remediations. This report uncovered critical vulnerabilities in both this and the previous year’s engagements, highlighting security areas we would have otherwise missed. In addition, threat modeling tailored to our application’s architecture provided clear risk scenarios specific to our unique business logic. The checklist of performed tests offered transparency and insight into the methodology. This second engagement, like the first, also featured a follow-up testing phase, where Sekurno reviewed our remediation efforts, ensuring our security upgrades were effectively implemented. These detailed reports and iterative testing have proven critical in fortifying our product’s security and maintaining compliance with industry standards.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Sekurno’s work delivered significant, measurable outcomes that enhanced both our security posture and compliance readiness. Their penetration testing report documented vulnerabilities with detailed attack vectors, enabling us to address potential risks preemptively. This documentation also met SOC 2 and security standards, critical for interactions with our customers who require such certifications.

A unique benefit of working with Sekurno was the ability to leave our internal development team fully engaged in core product work while Sekurno provided all necessary testing and compliance reporting. This hands-on support, coupled with Sekurno’s thorough findings and recommendations, gave us a clear understanding of our security state and future improvement pathways, aligning seamlessly with our internal risk management goals.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Sekurno’s project management was highly effective, characterized by proactive communication and consistent updates through Slack. The team maintained a tight schedule, delivering the first round of testing reports within two weeks, crucial for our project timeline. Communication was open and responsive, with dedicated team members, including a penetration testing project manager. The second-year collaboration reinforced Sekurno’s reliability, as they adapted to our evolving needs while keeping our timelines intact.

What was your primary form of communication with Sekurno?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out most was Sekurno’s depth of testing. Their approach went beyond standard practices, with a thorough investigation that identified critical, often overlooked issues specific to our use of third-party tools. Sekurno’s dedication to exhaustive testing gave us confidence in our platform’s security and highlighted their commitment to proactive risk management. Additionally, their project management and communication ensured a smooth process and timely delivery of all project milestones, setting a high standard of professionalism that exceeded our expectations.

Are there any areas for improvement or something Sekurno could have done differently?

To further streamline our workflow, incorporating an option to export findings in structured formats (e.g., JSON) would improve efficiency, allowing us to integrate issues directly into our internal task management systems. This would facilitate quicker remediation by reducing the need for manual data transfer from the reports.