Stingrai Inc.

BACKGROUND

I am the Principal for Product and Operations of Mesh Digital Services, Inc.

Mesh Digital Services is an identity, business and credential verification platform. We verify companies, professional licenses and individuals on behalf of our customers, delivered through web applications and APIs they integrate with.

OPPORTUNITY / CHALLENGE

• Produce audit-ready evidence with reproducible findings, clear severity ratings and a remediation and retest path
• Obtain an independent, human-led penetration test of our web applications and APIs to satisfy our annual penetration testing control for SOC 2
• Get genuine security findings our engineers could act on, rather than a compliance artifact

SOLUTION

Online Search

• Pricing fit our budget
• Good value for cost

2-5 Employees

Stingrai ran a hybrid engagement combining human penetration testers with their AI agent, starting black-box and moving to authenticated grey-box testing across multiple user roles. Coverage included authentication and session handling, authorization and tenant isolation, business logic, input validation, GraphQL and REST API behaviour, and cloud storage configuration, following PTES together with the OWASP Testing Guide v4.2 and the OWASP API Security standard.

Findings were published to their PTaaS platform as they were discovered rather than held until the end, and they delivered a full report with reproducible evidence, severity ratings and remediation guidance. The engagement also includes ongoing scanning and a retest window.

RESULTS & FEEDBACK

Secure 2 new critical customers with the potential of 10x the company's revenue.

Yes, very quick, professional, responsive and timely.

In-Person Meeting

Two things. They document what held up as carefully as what broke - I have rarely seen a penetration test report explicitly say "do not report this as an issue, this control worked correctly" - and that makes everything else in the report more trustworthy.

Their remediation advice is also written for the engineers who have to ship the fix, pointing at mechanisms we already had and should extend rather than at abstract best practice. One recommendation went out of its way to protect our end customers rather than just close our own gap.

The other thing worth noting is how they handled feedback. We came back with a detailed list of changes we wanted in the report and they returned a revised version within 24 hours that addressed every point, including reworking a finding's remediation advice once we had discussed the actual root cause. They engaged with the substance rather than defending the first draft.

Genuinely hard to find much. The one thing: the coverage and limitations detail - environment tested, roles used, endpoints actually covered - was not in the reporting template by default. We asked for it and they added it properly in a revised report within 24 hours. I would rather see that as standard in the template from the start, but the responsiveness when we raised it was excellent.

Disclosure: our engagement included a post-engagement discount tied to submitting reviews. The rating reflects our actual experience and was not conditional on the score.

BACKGROUND

Please describe your company and position.

I am the Network Operations Developer of eleven-x

Describe what your company does in a single sentence.

eleven-x provides smart parking solutions

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Run a security assessment of our application

SOLUTION

How did you find Stingrai Inc.?

Online Search

Why did you select Stingrai Inc. over others?

• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Stingrai ran a penetration test, explained identified vulnerabilities, validated resolutions, and supplied a report about the test.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Security vulnerabilities were identified, and their relative levels of risk were assessed.
Vulnerability resolutions were tested and reported on.
A report was delivered in a timely manner.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Audit started on schedule, ended on schedule, and report was delivered unexpectedly early (1 day, I'm used to a few weeks delay). The team was ready and available to discuss whether or not identified vulnerabilities were false positives and discuss potential remediations. Resolutions of identified vulnerabilities were tested within the audit window and reported on the final report.

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Stingrai Inc.'s responsiveness and the supplied education about vulnerabilities were unmatched with prior auditors. The turnaround for the report was near instant.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

I can not think of any serious critiques, this was about as smooth and thorough as it could go.

BACKGROUND

Introduce your business and what you do there.

Our organization operate a global network of locally owned collision, glass, and mechanical repair facilities, providing comprehensive automotive aftermarket services through multiple brands in over 2,000 locations worldwide.

OPPORTUNITY / CHALLENGE

What specific cybersecurity goals or objectives did you hire Stingrai Inc. to accomplish for Mondofix?

Stingrai Inc. was hired to conduct the necessary cybersecurity testing to help us achieve our organizational security goals and compliance requirements.

SOLUTION

What was the scope of their involvement?

Stingrai Inc. conducted security testing across our environment covering multiple scopes. They also provided comprehensive reports and recommendations following the assessment

What is the team composition?

We worked with 2–3 teammates from Stingrai Inc.

How did you come to work with Stingrai Inc.?

We identified Stingrai Inc. through an online search. We selected them because their company values aligned with ours, they have a strong industry reputation, and their pricing fit within our budget.

How much have you invested with them?

The services and outcomes provided were good value for the cost

What is the status of this engagement?

We worked together from October–December 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Stingrai Inc. provided weekly updates on the found vulnerabilities per section. Although we only had medium and low vulnerabilities, they recommended focusing on the important mediums and other security improvements by doing SAST and DAST.

How did Stingrai Inc. perform from a project management standpoint?

Stingrai Inc. performed very well from a project management standpoint. We primarily communicated through email and Slack, which proved to be convenient and effective.

What did you find most impressive about them?

They stayed consistent with their communications, and their advice was pretty good during the presentation. They managed to involve not only the security team but other teams as well.

Are there any areas they could improve?

Overall, their communication and presentations were strong. One area for improvement would be incorporating clearer audio and enabling video during presentations to enhance engagement

BACKGROUND

Please describe your company and position.

I am an executive at Crowdmark

Describe what your company does in a single sentence.

Grading and assessment SaaS for higher education.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Pen Test

SOLUTION

How did you find Stingrai Inc.?

Referral

Why did you select Stingrai Inc. over others?

• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Stingrai Inc. conducted a comprehensive penetration test covering our application, underlying infrastructure, and supporting services. The scope included external testing, authenticated application testing, and an assessment of potential attack paths an adversary might exploit. Their team performed manual and automated testing to identify vulnerabilities, misconfigurations, and opportunities to strengthen our overall security posture.

Key deliverables included:

A detailed penetration testing report outlining all identified findings, their severity, impact, and practical remediation steps.
A clear executive summary highlighting overall risk levels and high-level insights for non-technical stakeholders.
Technical evidence and walkthroughs demonstrating how each issue was discovered and how it could be exploited.
A remediation guidance package providing actionable recommendations and prioritized fixes based on industry best practices.
A review meeting where Stingrai walked us through the results, answered questions, and ensured we fully understood the implications and next steps.
Overall, their work delivered a thorough, well-documented assessment that helped validate our existing security controls and identify targeted opportunities for enhancement.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Overall, their work delivered a thorough, well-documented assessment that helped validate our existing security controls and identify targeted opportunities for enhancement.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Stingrai’s project management was smooth and reliable. They delivered all items on time and kept us informed throughout the engagement. Their team was responsive to our questions, quick to clarify details, and accommodating when we needed adjustments. Overall, communication was clear, timely, and easy to work with.

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What impressed us most was the combination of their technical depth and their ability to communicate findings clearly. 

Are there any areas for improvement or something Stingrai Inc. could have done differently?

Nothing comes to mind. Stingrai Inc. was responsive, professional, and delivered exactly what we needed.

BACKGROUND

Introduce your business and what you do there.

I’m the CTO of a company that builds AI-based modeling systems to allow building owners to understand the energy usage profiles of their buildings and plan retrofits.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Stingray Inc.?

We were going through a SOC 2 certification process, and as part of that, we needed a third-party penetration test.

SOLUTION

What was the scope of their involvement?

Stingray Inc. provided penetration testing services for us. The team performed external penetration testing on three of our web products. They used their own internal tools and provided a report with recommendations at the end.

What is the team composition?

We had one main point of contact and 2–3 analysts working on the project.

How did you come to work with Stingray Inc.?

I first heard about them through Google. I also went on some Slack forums that I’m a part of to get some reviews from people who had used them before. We had a short discovery phase where we did our own research and then reached out to them to set up a phone call. We also spoke with another vendor to gain a different perspective, but that was essentially it.

What is the status of this engagement?

We worked with them in October 2025; the engagement is now wrapping up.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Any findings that were uncovered were extremely helpful and relevant. Stingray Inc. was helpful in talking us through them; they were very clear.

How did Stingray Inc. perform from a project management standpoint?

The team was very responsive and communicative, and they delivered on time and on budget. We had a Slack channel open with them where we could ask any questions at any time, and they were really good at responding. We also used email and Zoom. Moreover, they had an internal tracking tool that they’d built, which we were able to use to get information about findings as they came up.

What did you find most impressive about them?

They were very flexible with our particular requirements in terms of how we set up the testing environments. We had a few unique challenges that we had to work through, and they were really good at working with us on that. Moreover, they were technically proficient in their work.

Are there any areas they could improve?

Their internal tracking tool is new and could still use a bit of work. We uncovered a few bugs with it.

Do you have any advice for potential customers?

They’re great; I’d recommend them.

BACKGROUND

Please describe your company and position.

I am the Director of Product and Operations of an IT company. 

Describe what your company does in a single sentence.

Technology platform that protects executives and their families from cyber-crime.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Conduct web application and API penetration test
• Identify and assess security vulnerabilities
• Provide actionable insights and recommendations

SOLUTION

How did you find Stingrai Inc.?

Referral

Why did you select Stingrai Inc. over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The objective of this web application and API penetration test was to identify and assess security vulnerabilities within the application that could be exploited by a malicious actor. The goal was to evaluate the application’s resilience against real-world attack scenarios by simulating an authenticated user with partial knowledge of the system, thereby uncovering security flaws that could compromise data confidentiality, integrity, or availability. The desired outcomes were to provide actionable insights into the application’s security posture, validate the effectiveness of existing security controls, and support teams in prioritizing and remediating any identified risks to strengthen the overall security of the platform.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Reported results, explained issues and recommendations, supported remediation activites.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Yes they delievered on time and were professional, clear and easy to work with.

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They are personable, friendly, and skilled.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

No

BACKGROUND

Please describe your company and position.

I am the founder at Capitawise. We are a B2B SaaS Insurtech bringing a financial intelligence platform for Insurers and Captives.

Describe what your company does in a single sentence.

Capitawise is a B2B Insurtech, bringing a purpose build financial intelligence platform for Insurers and Captives.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• We wanted to ensure the security aspects of our Intelligence platform as it is a critical part of our offering to prospects to provide a reliable platform for their data.

SOLUTION

How did you find Stingrai Inc.?

• Referral
• Other

Why did you select Stingrai Inc. over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

 Stingrai Inc. was hired to conduct penetration testing for our platform. The team tested the application, infrastructure, and integrations to identify potential vulnerabilities.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Stingrai uncovered potential vulnerabilities in the Capitalwise platform, giving the team a clear view of risks before they could be exploited. Penetration testing was accomplished efficiently. Stingrai uncovered potential vulnerabilities in the Capitalwise platform, giving the team a clear view of risks before they could be exploited. Stingrai were very efficient and professional in all the dealings. The tests were carried out by a team of three people who tested our application for vulnerabilities, cyber threats and multiple user access levels.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The findings were presented clearly, with practical remediation steps that were easy to understand and prioritize. This added immediate value to our security roadmap. The team maintained open communication throughout, quickly addressing questions and clarifying technical points, which helped our internal team stay aligned

What was your primary form of communication with Stingrai Inc.?

Virtual Meeting

What did you find most impressive or unique about this company?

The engagement was handled with professionalism, technical depth, and a collaborative approach that made the process both effective and efficient.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

We had no complaints with them for the services we availed. We would recommend Stingrai as they were fast and efficient with the contract process and the penetration testing itself. The findings were presented with clarity. They also gave us consideration as a startup and provided the service at a subsidised rate.

BACKGROUND

Please describe your company and position.

I am the CTO of shuriii

Describe what your company does in a single sentence.

We provide an instructional design copilot for K-12 teachers in high-priority schools.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Penetration testing our web application

SOLUTION

How did you find Stingrai Inc.?

friends

Why did you select Stingrai Inc. over others?

• High ratings
• Close to my geographic location
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

The scope of work involved engaging Stingrai to perform a comprehensive penetration test of our web application. Their team conducted an in-depth security assessment, simulating real-world attack scenarios to identify vulnerabilities and weaknesses across the application’s architecture, code, and configurations. Key deliverables included a detailed report outlining all identified issues, prioritized by severity, along with clear guidance and recommendations for remediation. Stingrai also provided strategic advice on strengthening our overall security posture and collaborated with our team to plan and execute retesting after fixes were implemented, ensuring all identified vulnerabilities were resolved effectively.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The measurable outcomes from the project include the identification and documentation of all critical and high-priority vulnerabilities in our web application, the implementation of recommended fixes, and successful re-testing confirming that these issues were resolved. The project also improved our overall security posture, reduced risk exposure, and provided clear metrics on vulnerability closure rates and remediation timelines, demonstrating tangible progress and success in strengthening the application’s security.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Stingrai demonstrated strong project management throughout the engagement. They delivered all reports and assessments on schedule and communicated timelines clearly. Their team was responsive to our questions and needs, providing guidance and clarification whenever required. They adapted to our requests for follow-up testing after fixes and ensured that the project progressed smoothly and efficiently from start to finish.

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What was most impressive about Stingrai was the creativity and diversity of their technical team. Their experts brought a wide range of perspectives and innovative approaches to identifying complex vulnerabilities, offering practical guidance for remediation, and providing strategic advice to strengthen our security. The combination of technical skill, creativity, and diverse experience made the engagement highly valuable.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

The progress report during testing could be better.

BACKGROUND

Please describe your company and position.

I am the CEO of moneta

Describe what your company does in a single sentence.

The moneta platform increases organization's technology investment ROI by actioning easy to understand techniques to reduce their cloud spend.  

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Perform Penetration Testing

SOLUTION

How did you find Stingrai Inc.?

Met at a Conference

Why did you select Stingrai Inc. over others?

• Great culture fit
• Good value for cost
• Reputable

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

moneta engaged Stingrai to perform Vulnerability Assessment and Penetration Testing services on the moneta web application and APIs. 

They provided a report of their findings upon completing their services.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Throughout the process, Stingrai communicated with the moneta team about the status of their work and findings.  At the conclusion of the project, they provided finding details with evidence of their conclusions.  

Describe their project management. Did they deliver items on time? How did they respond to your needs?

A person was assigned to the project who kicked-off the services via a virtual meeting.  The PM created a slack channel to communicate status and findings quickly and efficiently.  They quickly communicated findings during the process and recommended action to address any issues.  This was a huge value-add to me as it allowed for immediate remediation of a finding during the process and proper notation in the final report.

Yes, everything was delivered on-time.  A final report was issued upon completion of the project, however, they communicated everything so clearly during the process we were fully aware of what would be presented in the report.

Really well done here.

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

As stated perviously, they didn't stop at the identification of a finding, but took the extra step to recommend proper remediation steps for discussion.  It was very collaborative throughout the process.  Excellent communication.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

None identified.

BACKGROUND

Please describe your company and position.

I am the CTO of Clicktrans

Describe what your company does in a single sentence.

Transport Marketplace

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Stingrai Inc. to accomplish?

• Penetration testing

SOLUTION

How did you find Stingrai Inc.?

CTO community

Why did you select Stingrai Inc. over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from Stingrai Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Stingrai Inc. helped us identify long-standing vulnerabilities that were consistently overlooked by previous automated penetration tests. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Their deep-dive manual testing approach provided us with a far more comprehensive understanding of our security posture. As a result, we were able to proactively address critical issues and significantly enhance our system's security.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All was provided in time, according to set up shedule and agreement

What was your primary form of communication with Stingrai Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What stood out the most was their hands-on approach—unlike many providers that rely heavily on automated tools, Stingrai conducts extensive manual testing. This allowed them to discover vulnerabilities that others missed for years. In addition, their team is incredibly professional, punctual, and pleasant to work with. The communication and reporting were clear and insightful throughout the engagement.

Are there any areas for improvement or something Stingrai Inc. could have done differently?

Honestly, there’s very little to critique. If anything, the depth of their manual testing meant the process took slightly longer than more automated providers—but the results were absolutely worth the time investment.