Review on Include Security Experts in AppSec by Ross Decoteau

They have been thorough with our organization's needs from engagement through post assessment services (PAS). Their communication has always made it easy to understand what they were doing at every step along their process which allowed us confidence that we had proper controls put into place during an audit or risk analysis phase within my org. I would not hesitate working w/ this vendor again! Our engagements included looking across all facets including infrastructure & applications - both web / mobile apps but also cloud environments such as AWS RDS instances etc..