UnderDefense

BACKGROUND

Please describe your company and position.

I am the Executive of (a/an) Software

Describe what your company does in a single sentence.

• Staff Aug
• Custom Software Dev

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire UnderDefense to accomplish?

• Grey Box Penetration Test

SOLUTION

How did you find UnderDefense?

Online Search

Why did you select UnderDefense over others?

High ratings

What was the size of UnderDefense’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Underdefense performed a grey box penetration test and then provided us with a report on identified gaps, their criticality, and likelihood, and recommended where we could improve. They reviewed their key findings and results during a video meeting which felt very consultative.

As an outcome of this project, we received a defined remediation strategy that helped our organization meet security compliance and best practices. The team is very knowledgeable, honest, and professional, it was a seamless process. I 100% recommend them to any company.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Received a Letter of Attestation

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was excellent — professional, prompt, and knowledgeable.

What was your primary form of communication with UnderDefense?

Email or Messaging App

What did you find most impressive or unique about this company?

We were impressed by their professionalism, expertise, price, and culture.

Are there any areas for improvement or something UnderDefense could have done differently?

None

BACKGROUND

Please describe your company and your position there.

I'm CTO at the SaaS product company with custom code and CRM.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense, and what were your goals?

It was important for our company to ensure our projects have strong security thus their experience in cybersecurity was a great choice!

SOLUTION

How did you select this vendor and what were the deciding factors?

We did shortlist 5 different companies providing similar services and key decision factors were good references from previous customers, communication, relevant experience, and proactivity.

Describe the scope of work in detail, including the project steps, key deliverables, and technologies used.

The process established main activities were doing a penetration test. Underdefense worked with our team to review our projects and identify weak security spots and gaps. The vulnerabilities they found were addressed according to the recommendations on improvements and fixes. The urgent ones were assessed right away.

How many people from the vendor's team worked with you, and what were their positions?

We have 1 project manager and 1 penetration test engineer.

RESULTS & FEEDBACK

Can you share any measurable outcomes of the project or general feedback about the deliverables?

The outside view of our project's security showed we need to be very diligent with our security efforts. We feel more confident to continue our operations nowadays.

Describe their project management style, including communication tools and timeliness.

It was very effective. Communication was seamless and the discussion on the results was very easy to understand and clean.

What did you find most impressive or unique about this company?

Their expertise and communication skills are something that ensured providing high-quality results.

Are there any areas for improvement or something they could have done differently?

Can't think about any area for improvement, their work was very effective.

BACKGROUND

Please describe your company and your position there.

I'm DevOps team lead who develop and support products for our customers at 3DLOOK Inc.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We were looking for an external cybersecurity company, who can do for us good penetration test with using best practices of cybersecurity.

SOLUTION

How did you select this vendor and what were the deciding factors?

We had a good experience with UnderDefense earlier for a little project in internal needs. First criteria was a budget. Second criteria was a good portfolio and possabilities managed request in short time.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website and web apps, identifying potential risks in our infrastructure. After finished work, UnderDefence had provided a fully report about result. Our developers had analysed and rapid fix most priority advices.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager, 2 security engineer and sales manager who attendant and sync with us all time.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Our company was impressed with the communication with the UnderDefense team. I think it is only beginning of our partner way.

How effective was the workflow between your team and theirs?

We kept each other with all updates by throughout the period of interaction.

What did you find most impressive or unique about this company?

It is minimal gap between planned date and fact date of end.

Are there any areas for improvement or something they could have done differently?

More transparet report for mobile app.

BACKGROUND

Please describe your company and your position there.

I'm a Senior Security Engineer of an online casino.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

Due to several acquisitions, we wanted to measure and conduct an exercise to understand our current security risks on a broader scope than usual.

SOLUTION

How did you select this vendor and what were the deciding factors?

We chose this vendor based on their experience in the field of Pentesting.

Describe the project in detail and walk through the stages of the project.

The project consisted of 2 different stages. The first stage was that UnderDefense performs a black box discovery exercise, which includes a list of assets and their risk status. Results were documented and presented in a follow-up meeting. Second stage was a controlled exploitation exercises of one of the findings.

How many resources from the vendor's team worked with you, and what were their positions?

We had a client success manager, a project manager, and 4 pentesters.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify some risks that were transparent to us.

How effective was the workflow between your team and theirs?

We were kept fully updated during all parts of this exercise

What did you find most impressive or unique about this company?

The exercise was modified to meet our needs, specifically the final stage that also included a workshop that served as a learning experience to our team.

Are there any areas for improvement or something they could have done differently?

We were very satisfied throughout the whole exercise.

BACKGROUND

Introduce your business and what you do there.

Respeecher provides speech-to-speech voice cloning tools for sound professionals and the media industry.

OPPORTUNITY / CHALLENGE

What business challenge were you trying to address with the vendor?

We asked Underdefense to perform a pentest to begin assessing the state of security at our company.

SOLUTION

What was the scope of their involvement?

A pentest.

What is the team composition? 

Underdefence’s team for this project consisted of one senior engineer and two more engineers, plus a project manager.

How did you come to work with the vendor?

By a recommendation from a friend.

What is the status of this engagement?

Delivered.

RESULTS & FEEDBACK

How did the vendor perform from a project management standpoint?

Very good, aside from small communication hiccups.

What did you find most impressive about them?

Attention to detail from their customer success manager ;) Also, they had solid tech work.

Are there any areas they could improve?

Communication on the project management side could be more snappy, but it did seem to improve closer to the end of the project.
 

BACKGROUND

Please describe your company and your position there.

I am the privacy&compliance officer in an AI+IoT company

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We hired UD as our external expertise on the Mobile App and IoT Device penetration testing.

SOLUTION

How did you select this vendor and what were the deciding factors?

Yes, we did seek multiple vendors over the subject and hired three among five, including UD.

Describe the project in detail and walk through the stages of the project.

UnderDefense did a great job that capturing our very-recently exposed vulnerabilities, very on time.

How many resources from the vendor's team worked with you, and what were their positions?

probably 5, including four testers and one business contact.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The initial report is worthy of reference and detected the latest vulnerabilities, the report is very detailed describing the vulnerabilities.

How effective was the workflow between your team and theirs?

that was good and efficient.

What did you find most impressive or unique about this company?

1. respond quickly
2. good report
3. scheduled the testing and other arrangements very smooth and flexible

Are there any areas for improvement or something they could have done differently?

Need a re-notice on the arrangements, specially for the timeline and precautions about shipments.

BACKGROUND

Please describe your company and your position there.

I'm SW Engineer working for the company that produce smart flor heating systems

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

Our company were looking for a cybersecurity partner who can check the security level on the existing systems and also consult on the ongoing projects.

SOLUTION

How did you select this vendor and what were the deciding factors?

I wasn't involved in that process.

Describe the project in detail and walk through the stages of the project.

The project was about making a penetration test of the existing systems to discover all current and potential vulnerabilities. It covered mobile apps, websites, integration API's and thermostats. After which we received a detailed report with findings and recommendations on how to fix the issues and improve the system security in general.

How many resources from the vendor's team worked with you, and what were their positions?

We had a manager and from 2 to 4 penetration testers.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They found the vulnerabilities and potential issues on a different part of the system, that were prioritized. All findings were supplied with a detailed explanation, steps to reproduce, and a solution of how it can be fixed. So there were no questions from our side about how to improve the security of the system.

How effective was the workflow between your team and theirs?

We had good communication in Skype chat, where we discussed all issues/questions during penetration tests. And kickoff/report delivery meetings at the beginning and end of the project.

What did you find most impressive or unique about this company?

It was really helpful when they provided a technical solution for the core security part of our future system.

Are there any areas for improvement or something they could have done differently?

Nothing to the process where I was involved.

BACKGROUND

Please describe your company and your position there.

I'm a software developer in a Danish company that designing and developing electronic controls for underfloor heating and HVAC systems.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We needed to perform security audit of our websites and SaaS products.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched for Danish cybersecurity firms but also decided to check in Ukraine as we have developers there and cooperation might be smoother in this case. We chose UnderDefense based on their experience and kinds of services they provide.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website and web apps, identifying potential risks in our infrastructure. They delivered a report on all of our risks and provided a list of security recommendations. We are now implementing those changes.

How many resources from the vendor's team worked with you, and what were their positions?

PM, security analyst and penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They identified many risks and provided proper details of their findings so we could fix them quickly.

How effective was the workflow between your team and theirs?

They kept us updated as they went through each round of testing, and their reports were easy to understand.

What did you find most impressive or unique about this company?

The area of expertise is very wide, they are able to no just run penetration tests for web apps and services, but also analyse mobile apps, embedded software and hardware devices. Also they can help with architectural decisions and best practices for cyber security implementation.

Are there any areas for improvement or something they could have done differently?

They've done everything that we expected them to do perfectly.

BACKGROUND

Please describe your company and your position there.

I'm a project manager at an innovative technology company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We were looking for a company to perform robust penetration testing in accordance with specific methodologies.

SOLUTION

How did you select this vendor and what were the deciding factors?

After establishing the scope and requirements for our project, we spoke with several companies and UnderDefense was best able to meet our specific needs. Specifically, UnderDefense demonstrated excellent communication and was able to address our questions promptly and thoroughly. The timing was tight for our project, and UnderDefense was able to meet our schedule.

Describe the project in detail and walk through the stages of the project.

After agreeing on scope and timing we held a kickoff meeting during which technical requirements were discussed and the fine details of execution were reviewed. The project was executed as planned and without issue. Results were communicated in a concise manner and discussion following execution.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with a project manager and several technical team members over the course of the project.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The UnderDefense team executed the plan and the resulting report was very thorough and very well written. It contained detailed information which made prioritization of the next steps straightforward.

How effective was the workflow between your team and theirs?

UnderDefense kept our technical and management teams up to date on the testing process. Workflow and communication were excellent.

What did you find most impressive or unique about this company?

They were able to address our technical questions confidently, execute tasks flawlessly, and communicate clearly. They also provided a high-quality final report.

Are there any areas for improvement or something they could have done differently?

We would not recommend any changes.

BACKGROUND

Please describe your company and your position there.

I'm the CTO in Folio Technologies. Our company works in the field of identity verification and digital documents issuance.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire UnderDefense?

We were looking for an external cybersecurity company to perform an annual security audit of our website, mobile applications and SaaS products. Because we service the identity verification industry, we needed to make sure there were no potential data leaks.

SOLUTION

How did you select this vendor and what were the deciding factors?

We searched online for cybersecurity firms in our area and shortlisted two companies. After interviewing them, we chose this vendor based on their service package and experience.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website, web and mobile apps, identifying potential risks in our infrastructure. After they finished, they delivered a report on all of our risks and provided a list of security recommendations. We're now implementing those changes.

How many resources from the vendor's team worked with you, and what were their positions?

We had a team assigned to perform tests on our cloud platform and mobile applications.

RESULTS & FEEDBACK

How effective was the workflow between your team and theirs?

We had a dedicated team assigned to perform an audit and people to communicate with. Communication was done using Slack and Google Meet. They tried their best to keep us informed about progress and found issues and in the end complete report was provided. So, based on my personal impression, workflow as effective as it only possible.

What did you find most impressive or unique about this company?

Their attitude and professionalism were the most impressive