UnderDefense

BACKGROUND

Please describe your company and position.

I am the Marketer of Solva

Describe what your company does in a single sentence.

Email marketing tools help businesses create, send, and track email campaigns to engage their audience and drive conversions.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• Initially, we sought ISO 27001 compliance for our email signature generation service.
• After consulting with their vCISO team, we expanded our objectives to include comprehensive 24/7 security monitoring and incident response.

SOLUTION

How did you find UnderDefense?

Online Search

Why did you select UnderDefense over others?

Good value for cost

How many teammates from UnderDefense were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

UnderDefense provides full MDR services, including 24/7 SOC monitoring, threat detection and response, and security reporting. They integrated with our Jira workflow for incident management and gave us access to their MAXI platform for detailed security insights. They also help maintain our ISO 27001 compliance requirements.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We've seen significant reduction in our security team's alert fatigue, with false positives reduced by over 90%. Response times to potential threats are now measured in minutes rather than hours. We successfully passed our ISO audit, and we have clear metrics on our security posture through their reporting.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their SOC team is highly responsive and professional. Initial setup was completed on schedule, and their incident response consistently meets SLAs. They're particularly good at providing clear, actionable information through our preferred channels.

What was your primary form of communication with UnderDefense?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their vCISO team's consultative approach stands out. Instead of just selling us compliance services, they helped us understand our actual security needs and built a strategy that supports our growth.

Are there any areas for improvement or something UnderDefense could have done differently?

The initial setup process could be streamlined, though their team's guidance made it manageable. Everything else has met or exceeded our expectations.

BACKGROUND

Please describe your company and position.

 I am the VP, Security and Compliance of a legal tech company 

Describe what your company does in a single sentence.

Our comprehensive product portfolio includes enterprise legal management (ELM) and contract lifecycle management (CLM) solutions that automate customized workflows for managing matters, spend, vendors, and contracts.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• Grey box penetration test for several SaaS based applications

SOLUTION

How did you find UnderDefense?

Referral

Why did you select UnderDefense over others?

• High ratings
• Pricing fit our budget
• Referred to me

How many teammates from UnderDefense were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We required Grey box penetration test for several SaaS based applications. Additionally, internal and external network testing was required. The tests and reports are necessary for 3rd party external penentation testing of our applications

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Underdefense worked with us to perform the required testing and helped us understand the results, so remediations could be made where needed. They also provided the penentration test reports for our required 3rd party reviews of our SaaS applications. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Underdefense was responsive and from end to end, from the statement of work through the delivery of the final reports. 

What was your primary form of communication with UnderDefense?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

The issues they found were unique, so you know they were not just using tools to test, they were got in and really found some edge case issues that other penentation testers have not. 

Are there any areas for improvement or something UnderDefense could have done differently?

Nothings is jumping out a me. They did a solid job.

BACKGROUND

Please describe your company and position.

I am the CIO of Security of ARX Insurance Company

Describe what your company does in a single sentence.

Life insurance, transport insurance

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• 24x7x365 Security Monitoring
• MDR Service

SOLUTION

How did you find UnderDefense?

Referral

Why did you select UnderDefense over others?

• High ratings
• Close to my geographic location
• Great culture fit

How many teammates from UnderDefense were assigned to this project?

6-10 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

• Conduct a comprehensive assessment of the current security infrastructure 
• Deploy and configure UnderDefense 
• Integrate UnderDefense with the existing security tools
• Customize threat detection rules and policies to align with the specific environment and risk tolerance 
• Investigate security incidents promptly and thoroughly, providing detailed reports with remediation and prevention recommendation

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Reduction in the number of successful cyberattacks or security incidents 
• Decreased time to detect and respond to threats  
• Improved vulnerability management metrics 
• Time savings for the in-house security team due to automation and 24/7 monitoring

Describe their project management. Did they deliver items on time? How did they respond to your needs?

UnderDefense's project management was excellent. Their expertise and communication were top-notch . They proactively addressed potential issues during the deployment, completing it efficiently and without any disruptions.  Their flexibility allowed for customization, and their collaborative approach made us feel like true partners.

What was your primary form of communication with UnderDefense?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

UnderDefense impressed us with their ability to tailor their services to our unique needs and challenges. They didn't simply provide a one-size-fits-all solution, but instead took the time to understand our specific environment and requirements.

Their expertise in integrating with our current tools, along with their proactive approach to threat detection and response, gave us confidence in their ability to protect our business. Their commitment to open communication and collaboration also made them feel like a true extension of our team.

Are there any areas for improvement or something UnderDefense could have done differently?

While UnderDefense has exceeded our expectations in many areas, there's always room for growth. 

BACKGROUND

Please describe your company and position.

I am the CEO of a network security company

Describe what your company does in a single sentence.

Help companies to stay safe.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• Enhance our security posture in the face of rapid growth and limited in-house security resources.
• Address the unique challenges of a 100% cloud-based infrastructure.
• Improve threat detection and response capabilities with 24/7 monitoring.
• Consolidate and streamline our existing security tools for better management.

SOLUTION

How did you find UnderDefense?

Online Search

Why did you select UnderDefense over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from UnderDefense were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

UnderDefense's work with us was comprehensive. They deployed their MDR solution for 24/7 threat monitoring and response, and integrated all our existing security tools into one easy-to-manage platform.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Even with our rapid growth and limited resources, we've seen a real improvement in our overall security posture. We now have that 24/7 threat detection and response we were looking for, centralized management of our security tools, and much more confidence in our data security and compliance.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

UnderDefense was fantastic in terms of project management. They deployed their solution quickly and were always responsive to our needs and feedback. They truly felt like an extension of our team.

What was your primary form of communication with UnderDefense?

• In-Person Meeting
• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their proactive approach to security and genuine commitment to keeping our data safe really stand out. The seamless integration of our existing tools, the 24/7 monitoring, the rapid AI-driven threat response, and the focus on metadata and telemetry – it all added up to a truly impressive solution. And I can't say enough about how open they are to feedback and how quickly they implement improvements. 

Are there any areas for improvement or something UnderDefense could have done differently?

To be honest, it's hard to find anything to criticize. They're constantly working to make their product even better and are always receptive to our input. 

BACKGROUND

Please describe your company and position.

I am the CEO of RegisTeam

Describe what your company does in a single sentence.

Digital marketing Agency

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• We needed robust security monitoring
• We needed a professional incident response team to work 24/7

SOLUTION

How did you find UnderDefense?

Online Search

Why did you select UnderDefense over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost

How many teammates from UnderDefense were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

UnderDefense was engaged to set up and manage a 24/7 security monitoring system, tailored to our digital marketing operations. Key deliverables included real-time threat detection, regular security posture assessments, Slack-integrated incident responses, and training sessions for our team to understand and act on the insights provided.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Dramatically reduced incident response times, thanks to Slack integration. We also noted a significant decline in potential breaches, ensuring client trust remains intact.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Their project management is smooth and on-point. All deliverables were timely, and every concern we raised was addressed promptly, often with a Slack ping!

What was your primary form of communication with UnderDefense?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Beyond their tech prowess, it's how they've integrated modern communication tools like Slack into the security framework, making incident response feel more like a swift chat and less like a drawn-out process. UnderDefense truly understands the pace of digital businesses.

Are there any areas for improvement or something UnderDefense could have done differently?

Not really, we didn't find anything like that.

BACKGROUND

Please describe your company and your position there.

We work with emerging managers and boutique trading groups around the world to provide scalable access to Alpha for our Investors. Our proprietary models dynamically allocate to these alpha strategies to deliver customised solutions with consistent performance in all market conditions. Paramount to our principles is the provision of access to alpha with fair fee alignment, information transparency, and high liquidity to our investors.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We were looking for an external cybersecurity company to perform a pentest and security audit of our website and SaaS products.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online for a cybersecurity company. We choose this vendor based on their service package and experience.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website and web apps. They found a few issues and provided us with a detailed report. They also provided us with a detailed report on how to fix the issues.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager, 2 security analysts and penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify far more risks than our internal tests could, and their team is addressing those changes to us.

How effective was the workflow between your team and theirs?

They kept us updated as they went through each round of testing, and their reports were easy to understand.

What did you find most impressive or unique about this company?

We appreciated that they offered multiple alternative solutions that suited our budget.

Are there any areas for improvement or something they could have done differently?

Some of the testing took longer that we expected but their in-depth process paid off in the end.

BACKGROUND

Please describe your company and your position there.

Our company provides a mobile digital assistant for frontline teams. Our field execution platform guides daily tasks, speeds data collection, boosts communication, and gives leaders real-time intelligence to drive the right action, everywhere.I've been working here for 9 years, 6 of them as Information Security Specialist.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired consulting service - vCISO because we don't have internal professionals to gain the aim. We're planning to gain SOC 2 type 1 status, so we needed an assessment from a reliable cybersecurity partner.

SOLUTION

How did you select this vendor and what were the deciding factors?

The vendor is a well known security provider with significant proof record. We knew about UnderDefense so wanted to cooperate with the experts. We visited their office and spent 3 days together sharing experiences, which again proved their high quality

Describe the project in detail and walk through the stages of the project.

UnderDefense is helping us establish the Information Security Management System and fulfill its requirements. The team conducted the Security Gap Analysis and gave the recommendation to rapidly eliminate non-conformity.

How many resources from the vendor's team worked with you, and what were their positions?

There were 3 people who worked with us from vendor's side. Leading vCISO, who was building roadmap and planned all the activities, while also covering part of the job. Also 2 junior specialists who helped with documentation, policies and other tasks.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

UnderDefense has provided us with a Security Gap Analysis report and described what changes are needed to increase the security posture of our company. They conducted regular sync-up meetings and shared the progress of completed work.

How effective was the workflow between your team and theirs?

UnderDefense team immediately found a common language with our internal team, set up regular sync-up meetings, maintained continuous communication through a corporate messenger and documented all the project in Jira.

What did you find most impressive or unique about this company?

Their goal orientation and ease of communication make it a pleasure to work with them.

Are there any areas for improvement or something they could have done differently?

Did not notice such in our case.

BACKGROUND

Introduce your business and what you do there.

I am a principal software engineer at a software company. We host different SaaS offerings for identity governance.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with UnderDefense?

We wanted to reassure our customers and let them know our product was secure, so we engaged UnderDefense to lead web-based penetration testing efforts.

SOLUTION

What was the scope of their involvement?

UnderDefense presented us with a detailed survey to understand our product, how it can be accessed, and what API endpoints we had in place. We filled out the questionnaire, shared our desired testing points, and then scheduled a meeting to discuss our needs further. 

UnderDefense assigned an engineering team to conduct a test. We set up tenants and gave them credentials to access our platform. They performed the penetration test independently and compiled a findings report, which they shared with us. Finally, we met with them to go over the findings.

What is the team composition?

We engaged with four people from the UnderDefense team, including a project manager and security engineer. 

How did you come to work with UnderDefense?

We researched potential partners online. We looked at customer reviews and saw many positive comments regarding UnderDefense’s performance. We narrowed down our list of potential partners and settled on UnderDefense. 

How much have you invested with them?

We began working with UnderDefense in May 2022, and they completed the project in July 2022. 

What is the status of this engagement?

We invested roughly $18,000 in the project with UnderDefense.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

UnderDefense provided us with a final findings report and letter of attestation that we can share with our customers. They dug deep into our product, and we’re happy with the comprehensive results. 

How did UnderDefense perform from a project management standpoint?

The UnderDefense team was very professional and easy to work with. They met our deadline and worked within our budget. We used Slack and text messages to communicate; they were responsive partners. 

What did you find most impressive about them?

UnderDefense is good at what they do. Once we started working with them, it became clear that they knew what they were doing. They found issues we knew about already and some that we didn’t. Ultimately, they provided us with a beneficial service. 

Are there any areas they could improve?

I have nothing UnderDefense could improve on. 

Do you have any advice for potential customers?

I advise providing UnderDefense with as much information as possible during the discovery process. We were diligent in providing everything they asked for, which made for a successful engagement. It can be tedious to give minute details, but it will allow the team to understand your product better and identify potential issues.

BACKGROUND

Please describe your company and your position there.

I'm Operations and Product manager at the SaaS product company within Recruitment, Staffing and CRM.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

It was important for us to check that our projects have a strong security thus their experience within cybersecurity was a good match!

SOLUTION

How did you select this vendor and what were the deciding factors?

We did shortlist 3 different companies who provided similar services and key decision factors were - communication, relevant experience and proactivity.

Describe the project in detail and walk through the stages of the project.

The process was established where main activities were doing penetration tests. Their penetration test engineer worked closely with our team in order to review projects and identify weak security spots and gaps. The issues that were found were addressed to the main decision makers on the projects with further recommendations on improvements and fixes.

How many resources from the vendor's team worked with you, and what were their positions?

We have 1 project manager and 1 penetration test engineer.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

This was a great addition to our team and in general an outside view on our project's security side which in most cases would cover much more scenarios. Thus, a much higher results and quality we've received for our projects.

How effective was the workflow between your team and theirs?

The kind of improved some of the processes at our team and made them more transparent and efficient. Their communication and way of presenting the issues or tasks are definitely their strong suit.

What did you find most impressive or unique about this company?

Combination of expertise and communication level is something that lets providing very quality results.

Are there any areas for improvement or something they could have done differently?

As a recommendation it is highly important to keep up the same level of quality and communication while company is growing.

BACKGROUND

Please describe your company and your position there.

I'm the owner of a IT consulting firm - providing software development and data analytics services.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired UnderDefense to perform an external penetration test of our systems and social engineering on our employees to assess our vulnerabilities. We were taking a proactive approach to security.

SOLUTION

How did you select this vendor and what were the deciding factors?

Based on recommendations from colleagues and their extensive background in the area.

Describe the project in detail and walk through the stages of the project.

They first scoped out the multiple stages of our penetration test, aligned with us on their approach to test each area (external infrastructure, internal infrastructure, web applications and social engineering). Then they methodically went through each phase, keeping us updated along the way and then delivered a final presentation at the end of our vulnerabilities and what to remediate.

How many resources from the vendor's team worked with you, and what were their positions?

I believe we had 1 project manager and 2-3 security experts.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify a number of vulnerabilities and helped give us focus on where we need to better harden our security posture.

How effective was the workflow between your team and theirs?

They kept us informed via slack and were very responsive to any inquiries from our team.

What did you find most impressive or unique about this company?

We were impressed by how flexible they were and the strength of their security experts.

Are there any areas for improvement or something they could have done differently?

I would've preferred less invasive testing of social engineering, but I think it helped demonstrate their point.