WebSafety Ninja

BACKGROUND

Please describe your company and position.

I am the CTO of usheru

Describe what your company does in a single sentence.

usheru is an innovation-driven company in the film, music, sport and entertainment industry, delivering technological solutions for marketing and analytics, and tools to support and enhance direct to consumer relationships for our partners. Through a data-driven approach in conjunction with partnerships, collaborations and integrations with various stakeholders, usheru’s purpose is to create value, drive sales and maximise reach for each of its partners.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire WebSafety Ninja to accomplish?

• Ensuring security on our solutions

SOLUTION

How did you find WebSafety Ninja?

They alerted us about a potential vulnerability

Why did you select WebSafety Ninja over others?

Company values aligned

How many teammates from WebSafety Ninja were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Main scope was to perform a security audit of our usheru Connect client platforms, with a strong focus on the following user flows:

1.- Go to a cinema site to book a ticket. 

2.- Login / Registration process

3.- Community actions available on films

4.- Purchase a film to watch it directly on our clients site

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Penetration Testing Report

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They were really approacheable, always available when needed and very proffesional. 

What was your primary form of communication with WebSafety Ninja?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They didn't require us to invest time in explaining their engineers what are our products, what they do and how they work. They managed to get a great understanding about our offering in a very autonomous way. 

Are there any areas for improvement or something WebSafety Ninja could have done differently?

Overall, we are very happy with the way they carried out the security audit. 

BACKGROUND

Please describe your company and position.

I am the Director of Principal Consulting of a software company 

Describe what your company does in a single sentence.

Our company is an independent technology consultancy and software development firm.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire WebSafety Ninja to accomplish?

• White hat penetration testing of a web-based application we developed for a customer

SOLUTION

How did you find WebSafety Ninja?

Referral

Why did you select WebSafety Ninja over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from WebSafety Ninja were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We hired WebSafety Ninja to perform an independent penetration test of a web-based application that we developed for one of our customers and to provide a report with issues that they identified and recommended remediations

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

WebSafety Ninja provided a comprehensive and detailed report that highlighted and prioritized issues they uncovered. This report allowed us to quickly prioritize and resolve the issues they uncovered and make the application that we built and continue to maintain safer for our customer.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

WebSafety Ninja was highly communicative, collaborative, and informative. They managed our expectations well and kept all of their promises. The project ran smoothly and we received everything we expected on-time, on-budget and on-scope.

What was your primary form of communication with WebSafety Ninja?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

This is a small company by the number of people and a huge company by the level of experience and expertise. They really *really* know their stuff and provided a lot of value to us.

Are there any areas for improvement or something WebSafety Ninja could have done differently?

None.

BACKGROUND

Please describe your company and position.

I am the CISO of Olympus Mobility

Describe what your company does in a single sentence.

Olympus Mobility is a Mobilty As A Service provider helping organisations and their people implement mobility policies and use mobility solutions within the boundaries of the policies.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire WebSafety Ninja to accomplish?

• Validate the security of our outward facing REST API

SOLUTION

How did you find WebSafety Ninja?

Through spontaneous resposible disclosure of a small issue they discovered

Why did you select WebSafety Ninja over others?

• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from WebSafety Ninja were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Websafety Ninja was asked to perform blackbox penetration tests given only the URL of our management portal. In a follow-up phase they were given various types of accounts in our environment as well as access to the API documentation and some explanation on our portal, which enabled them to do a greybox pentest. The deliverable was a report on their findings with clear explanations on each finding for the purpose of validation.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The concrete questions of pentesters via Slack and the ultimate delivery of the blackbox and greybox reports.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

There was good communication, and the project was completed within the agreed timeframe. When asked for further clarification the response came quickly and was completely to our satisfaction.

What was your primary form of communication with WebSafety Ninja?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

They do not ask for a blank cheque and the communication lines are very short. They are no-nonsense, which also means you don't get to pay for nonsense and overhead.

Are there any areas for improvement or something WebSafety Ninja could have done differently?

If I need to mention 1 thing, then maybe send a small ping when the actual pentest starts. We knew what week we agreed on of course. Maybe a ping when the tester is hitting "Send" on his first request... but yeah, that is just being extremely picky. We are very pleased with how it went.

BACKGROUND

Please describe your company and position.

I am the Managing Director of JHL Digital

Describe what your company does in a single sentence.

Digital marketing for the pharmaceutical and healthcare industry

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire WebSafety Ninja to accomplish?

• Harden the security of websites produced by us
• Provide detailed report on any vulnerabilities
• Assess and confirm remediation steps were implimented properly

SOLUTION

How did you find WebSafety Ninja?

• Online Search
• Referral

Why did you select WebSafety Ninja over others?

• High ratings
• Pricing fit our budget
• Company values aligned

How many teammates from WebSafety Ninja were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Provide DAST and also full penetration testing for various websites we have developed. A detail report listing the findings were given and were appropriate suggested methods for closing the vulnerabilities were detailed in the report.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

The work was of outstanding quality and with a great level of detail which allowed us to close the security issues noted on the report. The documentation was exceptional and the Web SafetyNinja Team met all the required timelines.

Our developers found it helpful to be able to email and correspond with the security team to work up solutions for the web applications.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Project manage was good and they met all required timelines listed in the contract. We had direct communication with the security assessor.

What was your primary form of communication with WebSafety Ninja?

Email or Messaging App

What did you find most impressive or unique about this company?

Innovative outside of the box thinking to conduct the penetration tests. This was invaluable to us and was in addition to the standard cybersecurity services on offer.

Are there any areas for improvement or something WebSafety Ninja could have done differently?

Direct communications PM software was good. I would like more responsive email replies but eventually all enquires by email was responded to.

BACKGROUND

Please describe your company and your position there.

I'm the development team lead. We are creating web-based apps for e-commerce.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire WebSafety Ninja?

We were looking for an external cybersecurity company to perform a security audit of our website and backend-apps. Because we store a lot of customer information, we needed to make sure there were no potential data leaks.

SOLUTION

How did you select this vendor and what were the deciding factors?

WebSafety Ninja contacted us about a small security issue. And explain how to fix it. Later we searched online for cybersecurity firms in our area and added WebSafety Ninja to our shortlist. Because WebSafety Ninja already helped us with an issue we have chose for them.

Describe the project in detail and walk through the stages of the project.

They performed a thorough security audit of our website and web apps, identifying potential risks in our infrastructure. They used penetration testing to scan for vulnerabilities. After they finished, they delivered a report on all of our risks and provided a list of security recommendations. Together we are working on implementing those fixes.

How many resources from the vendor's team worked with you, and what were their positions?

We had a project manager and a penetration tester.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

They were able to identify far more risks than our internal tests could. Also they provide a report with the impact of the risks, they explain how a hacker could make use of the risk, and how we can fix it.

How effective was the workflow between your team and theirs?

They kept us updated during the security audit. Daily check-ins on Slack helped us stay on schedule.

What did you find most impressive or unique about this company?

The company is very practical. That is something that suits us well.

Are there any areas for improvement or something they could have done differently?

n.a.

BACKGROUND

Please describe your company and your position there.

Training people online to become Data and Software Engineers.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire WebSafety Ninja?

We do regular security and performance tests on our learning platform which are always done by an external security companies.

SOLUTION

How did you select this vendor and what were the deciding factors?

After communicating with other companies, we felt as we were promised a lot, but didn’t get anything. With WebSafety Ninja we got the feeling that they are really technical guys, who know what they are doing. The WebSafety Ninja team has a high tech level, deep knowledge; they ask the right questions. They gave a really fair offer, we didn’t overpay for the services.

Describe the project in detail and walk through the stages of the project.

We wanted to achieve 2 main goals:

• Check the container infrastructure (if it’s possible to break out them somehow and the resources to run cold)
• Check the training platform and all interfaces (if it’s possible to enter it somehow) In the first case we just gave them the platform, the IP address. With the second one we gave some more details like interfaces and addresses. Then they try to destroy or break something as a regular user. We also had some additional tests, like our marketing website. We weren't really focused on it, but WebSafety Ninja did a basic check, too.

At last, a couple of hours were for the VPN check. We dedicated up to 5 hours, but it took nearly 2. We were asked to pay exactly for the time they spent, it wasn’t overpaid.

How many resources from the vendor's team worked with you, and what were their positions?

My team and I worked with the founder of the company Maksym and the lead pentester Alex.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We expected to get the detailed audit report and we fully received it. Talking about communication, data was encrypted, so it really felt secure and safe. WebSafety Ninja has fulfilled our expectations. We were super happy with the audit.

How effective was the workflow between your team and theirs?

It was pretty good. From our side we clarified what we were expecting to do and Maksym gave us the advice. Work was pretty strict, fast and effective. We got all the audit communication when it was necessary.

What did you find most impressive or unique about this company?

Unique was how they approached us. At the moment we met WebSafety Ninja, I couldn't find any information about them and it was quite interesting. I liked their approach; we got a really good security issue report. So I decided to give them a chance and I didn’t regret it.

Are there any areas for improvement or something they could have done differently?

When we conduct the audit, WebSafety Ninja didn’t have a clear website, any certificates or customer refference (at the moment, everything has improved a lot). Invoicing, reputation, and showing a deep understanding of security is great, but from a business side they can improve their marketing approach.

BACKGROUND

Introduce your business and what you do there.

I’m an executive at a SaaS provider company in IT automation.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with WebSafety Ninja?

We’re continuously improving our services to improve their quality. We needed help optimizing our solution in security-related matters so that customers could have more trust in it.

SOLUTION

What was the scope of their involvement?

WebSafety Ninja gave us hints and warnings to optimize our services as part of a bounty hunter program to identify performance or security issues, acting as independent researchers. They gave us reports on the vulnerabilities they found that we used to analyze our situation and overall performance. We had a workshop where WebSafety Ninja showed us critical issues we needed to address. After that, we developed a plan together to improve the quality of our services regarding security.

What is the team composition?

We had two senior specialists from WebSaftety Ninja assigned to our project.

How did you come to work with WebSafety Ninja?

They approached us and told us there were ways to optimize our solution in terms of QA and security. Since we were impressed by their proactive approach, we had a meeting with them where they showed us the services they offered. WebSafety Ninja’s presentation was quite good, so we decided to start a business partnership with them.

How much have you invested with them?

We spent less than $5,000.

What is the status of this engagement?

We worked together from around March–June 2021.

We’ll rehire them because we have some checkpoints to review our performance and quality.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement? 

Our overall performance has increased 30%–35% thanks to WebSafety Ninja’s consulting services and reports. We mitigated all the issues they found, which enabled this increase in the quality of our service.

How did WebSafety Ninja perform from a project management standpoint?

In terms of project management, they worked quite professionally. Their reports and contract agreements were all very professional. They also delivered within the required timeframe.

What did you find most impressive about them?

WebSafety Ninja was proactive; they came up with customized solutions and had good skills in security-related areas. The team was also very flexible if we needed adjustments and could easily adapt to our scenario. This flexibility would make them a really good fit for any company. Additionally, they worked fast and were very quick with their assignments. 

Are there any areas they could improve?

I don’t have any suggestions for improvement.

Do you have any advice for potential customers?

My advice would be to explain your business scenario and pain points and be open to WebSafety Ninja’s suggestions. If you feel like you need a customized solution, ask them because the team is flexible in this regard. You should look into your business requirements and wait for their feedback.

BACKGROUND

Please describe your company and your position there.

I'm the CEO of a B2B SAAS company providing services for the pharmaceutical industry

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire WebSafety Ninja?

We aim at serving our clients the best and secure services. As part of our internal review, we were looking for a specialised external viewpoint on assessing our system security, audit and identify potential security vulnerabilities.

SOLUTION

How did you select this vendor and what were the deciding factors?

We were looking to work with a small team of experts rather than dealing with junior consultants from large tech firms. The initial contact was very professional and easy to work with so we decided to go on with the mission.

Describe the project in detail and walk through the stages of the project.

We provided them with the list of systems we wanted to test. For some, we even provided customer-like access to further analyse the potential risks of our systems from the outside or with some credentials. We agreed on a deliverable (standard vulnerability list with priority levels and description) They performed both scripted pentest and manual finessing, displaying a broad knowledge of angle points. The report was clear, intelligible, and professional.

How many resources from the vendor's team worked with you, and what were their positions?

We didn't get into the details of their own team but at least 2 analysts worked on the case.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The report was directly usable and transformed in actions to be taken, with priority orders. Ideas were good and the team cleared out some questions we had. Exactly what we wanted!

How effective was the workflow between your team and theirs?

We had regular updates, we managed to open some time windows for them to use if they had to heavily load the servers, which they didn't. No damage during the testsing phase and a quick delivery of the end-report.

What did you find most impressive or unique about this company?

We knew what we wanted in terms of budget and deliverables and they didn't push us overboard with unexpected costs or undesired outcome. We did appreciate working with a small company and people that are passionate about their job.

Are there any areas for improvement or something they could have done differently?

All good

BACKGROUND

Please describe your company and your position there.

Nettwerk Music Group is the umbrella company for Nettwerk Records, Nettwerk Management, and Nettwerk One Publishing. Nettwerk Music Group was founded in 1984 and for nearly 40 years has followed one motto: We release music that we love. Initially specializing in electronic music genres such as alternative dance and industrial, Nettwerk became a powerful player in pop and rock in the late 1980s and 1990s.

Today, Nettwerk is a diversified, independent group across a variety of genres, with an overarching philosophy to help inspiring artists grow their careers and realize their creative vision. At Nettwerk, we pride ourselves on our ability to anticipate shifts in consumer behavior and effectively leverage technology to place great music in the hands of fans.

With offices around the globe, Nettwerk continues to achieve international critical and commercial success with its label, management, publishing, and sync rosters. My position here is Senior VP of Information Technology.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire WebSafety Ninja?

To do penetration tests on any sites or services owned by Nettwerk and available over the internet.

SOLUTION

How did you select WebSafety Ninja and what were the deciding factors?

We were initially approached by them with a small security hole they had noticed. I was impressed with their overall knowledge and methodology for discovering external security issues so we hired them based on that.

Describe the project in detail and walk through the stages of the project.

We used them specifically for external penetration tests. I gave them a list of targets to focus on specifically several web based applications we had written in house. They were very professional. Sent a list of issues, gave several sources explaining the security issue and offered suggestions for fixes.

How many resources from the WebSafety Ninja team worked with you, and what were their positions?

I worked primarily with the head of the company and nobody else. He interfaced with all penetration testers and made sure we got the compiled reports, etc.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Our systems people are good at all the standard stuff, keep ports blocked, install software patches as they come out, rotate passwords, etc. We had one small issue with how one of our webservers that was hosting one of our web app's was configured. WebSafety Ninja found that hole.

Luckily we still had several years worth of logs and were able to see that nobody else had actually exploited that hole and it was a very simple problem to fix. If it were not for WebSafety Ninja that security issue would still exist and we would be completely unaware of it so it was VERY good that we hired them.

How effective was the workflow between your team and theirs?

They were extremely un-obtrusive in their efforts to find security holes however they did inform us when their people would be working so we would not be alarmed if our internal staff noticed the probes and thought we were being hacked.

What did you find most impressive or unique about this company?

They were extremely easy to talk to. They had great general knowledge and were generally easy to deal with.

Are there any areas for improvement or something they could have done differently?

Nope, they were great.

BACKGROUND

Please describe your company and position.

I am the IT Project Manager of an information technology company 

Describe what your company does in a single sentence.

An innovation community within the European Institute of Innovation and Technology (EIT) that brings together European manufacturing stakeholders to foster globally competitive and sustainable manufacturing through collaborative ecosystems. ​

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire WebSafety Ninja to accomplish?

• Assess current cybersecurity maturity
• Audit the security by pentesting

SOLUTION

How did you find WebSafety Ninja?

Referral

Why did you select WebSafety Ninja over others?

• High ratings
• Pricing fit our budget
• Good value for cost

How many teammates from WebSafety Ninja were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Pentesting activities on a specific web-based project

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Vulnerabilities found and fixed

Describe their project management. Did they deliver items on time? How did they respond to your needs?

All was done in time and the team was very quick to respond to any question

What was your primary form of communication with WebSafety Ninja?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Quick and efficient

Are there any areas for improvement or something WebSafety Ninja could have done differently?

All good