Software Secured

BACKGROUND

Please describe your company and position.

I am the CTO of Fligoo Corp.

Describe what your company does in a single sentence.

Enterprise AI Solutions built and designed to solve complex problems & opportunities

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• 360 application penetration test

SOLUTION

How did you find Software Secured?

• Online Search
• Referral

Why did you select Software Secured over others?

• Close to my geographic location
• Good value for cost

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

360 application penetration test: Annual web and API penetration testing gains assurance that the most sensitive data is secured. This was conducted using Software Secured’s proprietary application penetration testing methodology.

Deliverables:

• Actionable report
• External certificate
• Remediation support 
• Proprietary testing stack
• 3 rounds of retesting
• Mapped to multiple industry standards (OWASP Top 10,WSTG, ASVS, SANS Top 25 and NIST)
• Light threat modelling
• Custom business logic testing

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Every step of the project was communicated effectively, and they adhered to the plan without any delays on their part.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, they delivered items on time and were very understanding about delays on our part.

What was your primary form of communication with Software Secured?

Email or Messaging App

What did you find most impressive or unique about this company?

We love working with young technology companies because their eagerness to grow is evident, and their focus on customer success is exceptional. Having the founder involved is always appreciated.

Are there any areas for improvement or something Software Secured could have done differently?

I know they have limited resources, but this created a bottleneck that can delay a project's start or push retests too far out.

BACKGROUND

Please describe your company and position.

I am the Software Developer of Marco Learning Inc.

Describe what your company does in a single sentence.

We offer grading services to educators and schools across the USA.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Assess our security level, to protect our customers' data
• Part of the process for SOC2 compliance

SOLUTION

How did you find Software Secured?

• Online Search
• from Drata hub

Why did you select Software Secured over others?

• High ratings
• Pricing fit our budget
• Good value for cost

Describe the scope of work in detail. Please include a summary of key deliverables.

Scope of work is External Blackbox Network Test. 

3 full days of testing for one public facing IP.

One full day of re-test for previosly found vulnerabilties.
Deliverables include comprehensive and intuitive reports for both sessions of testing and a certificate at the end of the whole process

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Detected initially 15 vulnerabilities (above info level)
Labeled as remediated or accepted 13 out of 15 vulnerabilties during the re-test (including 4 High level remediated)

Our company took several actions that resulted in sensible increase of our cibersecurity

We remediated the remaining 2, and we are scheduling an additional round for the re-test

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was delivered on time as scheduled. 
Project managers were responsive and really helpful during the whole process.

What was your primary form of communication with Software Secured?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Software Secured has a manual based approach on the penetration testings. Cybersecurity experts perform the tests and customize them, based on the current needs. 
We had a kick-off meeting with the Pentesting lead, which was great and helpful. 

Software Secured's dashboard and reports were also intuitive and perfect for a small company like mine. 
I believe Software Secured services fit perfectly the startups needs.

Are there any areas for improvement or something Software Secured could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the President of Overseas Network

Describe what your company does in a single sentence.

Overseas Network is a B-to-B travel company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Pen test for new system

SOLUTION

How did you find Software Secured?

• Referral
• Other

Why did you select Software Secured over others?

• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned
• Have worked with them in the past

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• 360 application and infrastructure pen test 
• retesting per identified vulnerability in the report. 
• detailed written report with the results including an itemized listing of all the vulnerabilities found, source, and code weaknesses identified and a prioritized set of mitigating or remedial actions for each vulnerability or weakness. 
• penetration testing certificate

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Reports and constant communications We knew exactly what to fix and Software Secured gave us very clear information about how to solve the issues as well

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes everything on time. Extremely responsive and friendly. We had some delays on our end but they were always there for us and never complained

What was your primary form of communication with Software Secured?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They were very professional yet easy to work with. Straightforward and reasonably priced. Not always easy to find a company like Software Secured in the cybersecurity world,

Are there any areas for improvement or something {provider_name} could have done differently?

No that i can think of

BACKGROUND

Please describe your company and position.

I am the Head of DevOps of Finalis Inc

Describe what your company does in a single sentence.

Software Secured consistently delivers exceptional quality in their penetration test reports. Their transparent workflow and clear findings explanation make the process smooth. Notably, they include an informative appendix to demystify technical terms. This commitment to transparency and thoroughness sets them apart. Their actionable recommendations showcase their dedication to client security. In essence, Software Secured is a top choice for reliable cybersecurity services.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Networking and Software cybersecurity findings

SOLUTION

How did you find Software Secured?

Online Search

Why did you select Software Secured over others?

• High ratings
• Great culture fit
• Good value for cost

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of the cybersecurity penetration test encompassed a comprehensive evaluation of the target systems and applications to identify potential vulnerabilities and security weaknesses. The engagement was conducted with the goal of simulating real-world attacks, ultimately assisting in enhancing the overall security posture. The assessment included but was not limited to:

1. External Network Testing: An examination of the network perimeter from an external perspective to identify potential entry points for malicious actors. 
2. Internal Network Testing: A thorough evaluation of the internal network to assess the extent of lateral movement and potential internal vulnerabilities. 
3. Web Application Testing: In-depth analysis of web applications for security flaws, including SQL injection, cross-site scripting, and other common vulnerabilities. 
4. Report on Findings: Compilation of detailed reports on all identified vulnerabilities, including their severity, potential impact, and actionable recommendations for remediation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Key Deliverables: The penetration test engagement resulted in the following key deliverables:

1. Comprehensive Test Reports: A detailed report for each phase of testing, outlining all discovered vulnerabilities, their technical details, and associated risks.
2. Severity Assessment: A clear classification of vulnerabilities based on their severity, helping prioritize remediation efforts effectively. 
3. Actionable Recommendations: Specific guidance on addressing each vulnerability, with recommendations for remediation or mitigation measures. 
4. Risk Assessment: An overall risk assessment, outlining the potential impact of exploiting identified vulnerabilities and their implications for the organization.
5. Appendix of Terminologies: A supplemental document explaining technical terms and jargon used in the reports, aimed at improving understanding for stakeholders with varying technical backgrounds. 
6. Debriefing Session: An interactive session to discuss the findings, recommendations, and answer any queries, ensuring a clear understanding of the results. 

The scope of work and deliverables collectively aimed to provide a comprehensive evaluation of the organization's security landscape, enabling informed decision-making and proactive measures to bolster cybersecurity defenses.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The project management exhibited by the team at Software Secured was noteworthy for its efficiency and responsiveness. Throughout the engagement, they demonstrated a well-structured and organized approach that facilitated seamless communication and timely progress. 

• Project Management Approach: The team at Software Secured effectively managed the project by establishing a clear roadmap and timeline right from the outset. They provided a detailed project plan that outlined the different phases of the penetration test, including milestones and anticipated completion dates. This proactive approach helped in aligning expectations and tracking progress. 
• Timely Deliverables: Software Secured consistently adhered to their promised timelines and delivered items as scheduled. Their commitment to meeting deadlines was evident in the timely submission of reports and deliverables at each phase of the engagement. This reliability contributed to a smooth collaboration, allowing us to plan and allocate resources effectively. 
• Responsiveness to Needs: One of the standout aspects of Software Secured's project management was their exceptional responsiveness to our needs. In summary, Software Secured exhibited exemplary project management throughout the engagement. Their commitment to adhering to timelines and their proactive responsiveness to our needs underscored their professionalism and dedication to delivering a high-quality service.

What was your primary form of communication with Software Secured?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their commitment to transparency, accessible communication, and their ability to bridge the gap between technical intricacies and layman understanding were the most impressive and distinctive aspects of their company.

Are there any areas for improvement or something Software Secured could have done differently?

We are pleased to express that our experience with Software Secured has been truly satisfying across all aspects.

BACKGROUND

Please describe your company and your position there.

I’m a Sr. Security Analyst at an industry-leading securities brokerage platform enabling boutique investment banks to operate legally and compliantly.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Software Secured?

We use Software Secured twice a year for our external penetration tests.

SOLUTION

How did you select this vendor and what were the deciding factors?

I have had the opportunity to review their work in a previous position, and their price-to-quality quotient is outstanding.

Describe the project in detail and walk through the stages of the project.

They performed the blackbox and greybox penetration tests in our systems. The first stage was defining the scope and the requirements of the project. Second, they started the assessment—it was on this stage that I really appreciated the clear, unequivocal communication with their representatives. Third, they shared the penetration test report for our analysis, which was entirely valuable. Finally, they retested the findings fixed by our engineering team.

How many resources from the vendor's team worked with you, and what were their positions?

An account manager, a project manager, and the pentest team.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They wrote two excellent penetration test reports, based on the types of penetration test we requested. Each report contained a short introduction, a detailed explanation of the findings, and how to reproduce these. It is important to mention that the findings were organized by severity and risk. Finally, they included a brief appendix explaining all terminology used.

How effective was the workflow between your team and theirs?

The workflow was very smooth, with easy and transparent integration between our teams.

What did you find most impressive or unique about this company?

We commend the superior quality of their reports and the easy interaction with their representatives.

Are there any areas for improvement or something they could have done differently?

Not to my mind, no.

BACKGROUND

Please describe your company and your position there.

I'm the Director of Operations at a company that does analytics for some of the largest companies around the world.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Software Secured?

We used their services for our annual penetration testing.

SOLUTION

How did you select this vendor and what were the deciding factors?

They knew what they were doing, and had good suggestions during our initial review. Their price was one of the better ones that we were quoted.

Describe the project in detail and walk through the stages of the project.

They did a full penetration test for us, getting everything done that we required. External pen tests, endpoint testing, attempting to access things they shouldn't be able to, and finding things we haven't thought of.

How many resources from the vendor's team worked with you, and what were their positions?

We had a lead and at least one security engineer. Our surface area is not large (on purpose) so it didn't require a large team.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They provided one of the best penetration test reports I had ever seen. A detailed report for internal use and resolution, and a summary certification to be stored for evidence and sharing externally.

How effective was the workflow between your team and theirs?

Everything was great!

What did you find most impressive or unique about this company?

They provide the quality of some of the biggest names in security, without the price tag and complications. If you need some things done, have a pretty good idea of what needs to get done, and don't want to be sold a bunch of extras that aren't required for the project, this is who you go with.

Are there any areas for improvement or something they could have done differently?

Not for that project.

BACKGROUND

Please describe your company and position.

I am the Chief Technology Officer of Qurrent

Describe what your company does in a single sentence.

Qurrent empowers enterprises to lead their AI transformations.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Penetration testing

SOLUTION

How did you find Software Secured?

Referral

Why did you select Software Secured over others?

Referred to me

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration testing for our compliance requirements.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Completed penetration test report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The team delivered on time, and was quick to respond to any questions via Slack.

What was your primary form of communication with Software Secured?

Email or Messaging App

What did you find most impressive or unique about this company?

Speed of delivery

Are there any areas for improvement or something Software Secured could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the CTO of Hedgineer

Describe what your company does in a single sentence.

Portfolio, research, and risk products for asset management, built on top of innovative data and AI solutions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Security first principles
• SOC 2

SOLUTION

How did you find Software Secured?

Referral

Why did you select Software Secured over others?

Referred to me

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Pentest

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Tightening up some of the security of our main webapp based on pentest findings

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes, very responsive

What was your primary form of communication with Software Secured?

Email or Messaging App

What did you find most impressive or unique about this company?

Software Secured was prompt and friendly.

Are there any areas for improvement or something Software Secured could have done differently?

None

BACKGROUND

Please describe your company and position.

I'm an executive at rosswalk Health

Describe what your company does in a single sentence.

Crosswalk Health partners with EMS agencies nationwide to provide value-based care expertise and needs-matched care in real-time.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• Penetration testing for SOC 2 compliance

SOLUTION

How did you find Software Secured?

Referral

Why did you select Software Secured over others?

• Great culture fit
• Referred to me

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We contracted with Software Secured to provide:

• A black box network penetration test
• An actionable internal report of findings and remediation support
• An external customer report/certificate of penetration testing
• One round of retesting after remediation

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Successful penetration test
• Ease of understanding results and next steps
• Successful remediation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Throughout the engagement, Software Secured was responsive, thorough, and delivered items on time, in spite of the very aggressive/expedited timeline in which we needed to complete the work (within 10 business days). They were consistently prompt and helpful throughout the process.

What was your primary form of communication with Software Secured?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their clear engagement process and customer service were superb.

Are there any areas for improvement or something Software Secured could have done differently?

Given the timeline and circumstances, Software Secured was thoroughly professional and went above and beyond during our engagement. Nothing was lacking in our business relationship.

BACKGROUND

Please describe your company and position.

I am the Principal Engineer of Welbi

Describe what your company does in a single sentence.

We provide tools to improve senior lifes in retirement communities

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Software Secured to accomplish?

• penetration testing
• getting controls checks for a SOC2

SOLUTION

How did you find Software Secured?

Referral

Why did you select Software Secured over others?

• Close to my geographic location
• responsiveness

How many teammates from Software Secured were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Penetration testing for our main application

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Provided list of vulnerabilities with detailed replication steps.
Re-tested after we fixed problems

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Everything was quick and easy to get delivered. 

What was your primary form of communication with Software Secured?

Virtual Meeting

What did you find most impressive or unique about this company?

TIght deadline and they were quick to respond

Are there any areas for improvement or something Software Secured could have done differently?

Not that I think of