Zigrin Security

BACKGROUND

Please describe your company and position.

I am the Head of Engineering of (a/an) Software

Describe what your company does in a single sentence.

We build software to create and productionize data science using one easy and intuitive environment, enabling every stakeholder in the data science process to focus on what they do best.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Zigrin Security to accomplish?

• Find security issues in our products through penetration testing

SOLUTION

How did you find Zigrin Security?

Referral

Why did you select Zigrin Security over others?

• Good value for cost
• Referred to me

What was the size of Zigrin Security’s team?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Zigrin performed several penetration tests on our software products, both blackbox and whitebox tests. After the tests they provided detailed reports of the found vulnerabilities including CVSS scores, steps to reproduce the issue and suggested remediations.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Report of found vulnerabilities

Describe their project management. Did they deliver items on time? How did they respond to your needs?

After an initial call Zigrin immediately started running their tests. Found issues are reported to the development teams immediately and the final reports contain precise and comprehensive instructions on how to reproduce the issues and suggestions on how to fix them. They are also familiar with modern technologies such as microservices running in Kubernetes and focus on issues specific to these environments as well.

What was your primary form of communication with Zigrin Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Unlike several other companies that have done tests on our software, Zigrin Security first tried to understand how our software is used and what it can do. This helped reduce the number of false positives that we received from other companies in the past.

Are there any areas for improvement or something Zigrin Security could have done differently?

No.

BACKGROUND

Please describe your company and your position there.

Our business is software development outsourcing. We provide our clients with IT specialists. We help them with research and development of their IT systems. I provide complete design teams for our clients. I am responsible for internal systems in the company, I maintain and develop them.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Zigrin Security?

We hired Zigrin Security for prepared penetration test our Company website.

SOLUTION

How did you select this vendor and what were the deciding factors?

One of my friends recommended me Zigrin Security. The facts were as follows: high professionalism in the approach to the implementation of works Project idea (I mean project plan, schedule, meeting plan, milestones, good communication) Extensive experience Highly qualified employees Great commitment

Describe the project in detail and walk through the stages of the project.

The project consisted of two stages. Stage I Testing the operation of the platform Start of the 1st stage of tests Preparation of a report on the first stage of tests Presentation of the results Stage II Introduction of recommendations based on the report from stage 1 Start of the second stage of testing Preparation of a report on the second stage of tests Presentation of the results End of Project

How many resources from the vendor's team worked with you, and what were their positions?

There were 3 penetration testing specialists on their part

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Success is simple, currently our site is safe.

How effective was the workflow between your team and theirs?

The company Zigrin Security conscientiously and timely fulfilled its obligations. Her activities were characterized by high professionalism in the approach to the implementation of works. Big experience and high qualifications of employees translated into effects that met ours expectations. The cooperation went smoothly and with great commitment

What did you find most impressive or unique about this company?

The company Zigrin Security conscientiously and timely fulfilled its obligations.

Are there any areas for improvement or something they could have done differently?

The cooperation went smoothly and with great commitment.

BACKGROUND

Please describe your company and position.

I am the CTO of Legartis Technology AG

Describe what your company does in a single sentence.

Contract review and automation with AI

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Zigrin Security to accomplish?

• Validate security
• Close leads with proof of pentest

SOLUTION

How did you find Zigrin Security?

LinkedIn

Why did you select Zigrin Security over others?

• Pricing fit our budget
• Company values aligned

Describe the scope of work in detail. Please include a summary of key deliverables.

• Pentest of our API and WebApp including OWASP Top Ten 
• Test of multi tenant security 
• Created pentest report

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Successful retest and closed deal

Describe their project management. Did they deliver items on time? How did they respond to your needs?

• Very quick response times
• They were flexible to requests and changes

What was your primary form of communication with Zigrin Security?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Quick and agile response time which was also one of the main decision drivers

Are there any areas for improvement or something Zigrin Security could have done differently?

Contract signing could be streamlined

BACKGROUND

Please describe your company and your position there.

I am the service delivery manager for penetration testing service at NATO. I manage a team of 15 engineers.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Zigrin Security?

The cyber-Security services are nowadays a must to have, and our business is growing faster than we can recruit new resources. Our solution was to outsource part of our activity, hence our request to Zigrin Security to help us to reduce our backlogs in penetration testing.

SOLUTION

How did you select this vendor and what were the deciding factors?

We selected contractors following our acquisition process through a list of consulting firms screened and approved by NATO. Then after a technical interview of the candidates, we select the candidate that fits the most to our business.

Describe the project in detail and walk through the stages of the project.

The project is to perform advanced security audits on commercial products in order to identify the level of maturity in term of security of the tested products. It includes the installation of the product on a testing environment, the penetration test (ethical hacking), the reporting and the responsible disclosure.

How many resources from the vendor's team worked with you, and what were their positions?

The CEO is our main point of contact.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

For security reason, I am not allowed to go into details about the products tested and their associated identified vulnerabilities. What I can say is that for the first 3 products tested, several findings were identified, which for most of them are 0-days (vulnerabilities that have not been reported before).

How effective was the workflow between your team and theirs?

Zigrin Security received a loptop that allow them to access to our enterprise services such email, instant Messager and other collaborative tools, which facilitates the communication and the coordination with us.

What did you find most impressive or unique about this company?

Zigrin Security provide since the first contact security assessment and recommendation in line with our businesses. The penetration tester mastered our tools and methodologies in a few days, saving a lot of time for the testing.

Are there any areas for improvement or something they could have done differently?

The tests, the communication and the coordination are done remotely. I wish we could meet and work more often with my team for larger projects.