Veribreak LLC

BACKGROUND

Please describe your company and position.

I am the Security Coordinator of an IT company

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Veribreak LLC to accomplish?

• Deliver the annual penetration test for a hospital client engaged through their MSSP. Assess the public and internal web applications, the supporting API, the network, and a new AI feature, then confirm the client security posture against real attack scenarios.

SOLUTION

How did you find Veribreak LLC?

Linkedin

Why did you select Veribreak LLC over others?

• High ratings
• Pricing fit our budget
• Good value for cost
• Company values aligned
• Technical expertise

How many teammates from Veribreak LLC were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We found Veribreak LLC through their founder's LinkedIn profile, where he posted about AI security testing work his team had done. That's what got us to reach out, we needed a vendor who understood AI features, not just standard web app testing, and his posts showed they had real hands on experience there.

The biggest factor in choosing them was technical strength paired with availability. We had a hard deadline and most vendors needed weeks just to schedule a kickoff. Veribreak had their team started on actual testing within a day of us signing off, no long onboarding, no back and forth over scope. That alone put them ahead of firms we'd used before.

We brought them in for the annual penetration test on a healthcare client's hospital platform we manage as their MSP. Scope covered four parts: the public hospital website, the internal application used by doctors, nurses, reception staff, and patients, the API layer behind both, and a new AI feature letting patients run a self diagnosis before seeing a provider. Rather than testing each piece in isolation, they assessed the web apps, API, network, and AI feature as one connected system, the way a real attacker would pivot across an environment, including network segmentation and perimeter checks alongside the application work.

The AI self diagnosis feature was the standout. Most firms we've used before don't have real experience testing AI features, they treat it like any other form. Veribreak found multiple real flaws there that no previous vendor had caught, proof their technical depth showed up in the actual findings, not just the pitch.

Every finding was manually confirmed, not just tool flagged, and ranked by real world production impact rather than a generic CVSS score. They gave us clear steps to reproduce each issue so our own engineers could verify it, and stayed engaged through remediation, joining calls and answering questions instead of disappearing after the report.

We had a compliance deadline tied to this engagement, and they delivered on time without cutting corners. Once remediation was done, they ran a free retest on the fixed items and confirmed each was actually closed, not just marked complete on our word.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Veribreak completed the full assessment across four connected surfaces, including the new AI feature, in time for our client's compliance renewal, despite starting on one day's notice. Every finding came with reproduction steps our engineers could follow directly, cutting the back and forth we usually get from vague reports. The standout result was the AI self diagnosis component, previously tested by another vendor and cleared, where Veribreak uncovered several real, exploitable issues no one had caught before.

After remediation, they ran a complimentary retest confirming each fix actually held, giving us independent verification for the client's compliance file. We've since brought them back for follow up work and are evaluating them for other accounts across our MSP portfolio.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project management was prompt throughout. We were kept in the loop by email for every item, from kickoff through delivery, so nothing landed as a surprise. When we gave steering instructions mid test, whether that meant shifting focus toward a specific area or flagging something we wanted a closer look at, they respected that direction and still delivered everything within the planned window.

Response time was consistent across the engagement. They started testing within a day of us signing off, hit the deadline tied to our client's compliance renewal, and communicated proactively rather than making us chase updates. That combination of speed and reliability made this one of the smoother vendor engagements we've run.

What was your primary form of communication with Veribreak LLC?

Virtual Meeting

What did you find most impressive or unique about this company?

The team is young but highly skilled, which isn't something you run into often in this space. Communication was prompt at every stage, and they treated the engagement as more than a checkbox exercise. Instead of just handing us a PDF and moving on, they stayed involved and were genuinely willing to help us understand and work through the findings.

That willingness to help is what set them apart. Plenty of vendors can run a scan and write a report. Fewer are actually invested in getting the client to a better security posture, and that kind of engagement brings value that money alone can't buy.

Are there any areas for improvement or something Veribreak LLC could have done differently?

Honestly, the only thing we'd point to is on the marketing side, not the work itself. We only found them by chance through the founder's LinkedIn posts. If they had more visibility as a firm, we would have discovered them sooner and brought them in on past engagements instead of just this one. Our advice would be to invest more in getting the word out, because the technical work speaks for itself. Whatever they do, they shouldn't change how they operate, no compromise on quality, just more people need to know they exist.