Include Security Experts in AppSec Review

I've been working with includesec since 2016 when they were called Pwned Passwords - we worked together closely throughout their existence (until 2018). They have helped us build out our own infrastructure so that it was able to scale beyond what other vendors could provide at this point during my tenure there! Their support has always taken very seriously but also never let me down or made things difficult along the way which really surprised me given how big some clients can be!! Not much…

They have been thorough with our organization's needs from engagement through post assessment services (PAS). Their communication has always made it easy to understand what they were doing at every step along their process which allowed us confidence that we had proper controls put into place during an audit or risk analysis phase within my org. I would not hesitate working w/ this vendor again! Our engagements included looking across all facets including infrastructure & applications - both…

I like that they are very thorough and go through everything with you. They have good knowledge regarding the current threat landscape and will ask questions to ensure you get the most out of the assessment. I also liked their flexibility with payment options. Make sure you understand what the report entails-this may take some time for people not familiar with the industry. We used to be able to just walk into a store and buy a new car. Now we need to shop around for financing and insurance…

It's amazing how much more I can do with them than just testing applications! They've helped me figure out what my next steps will be when it comes time to write up findings/reports from our tests, have put together presentations that really help us sell their service (as opposed to simply saying "we test apps"), etc. Their staff has been very helpful throughout this process; they make sure we understand everything so there aren't any questions later down the road once things get implemented or