The technical depth is well beyond what we expected at this price point. The findings weren't scanner output with a logo on top - the team traced issues back to specific code paths, explained why each one existed, and in several cases pointed out that the fix was extending a control we already had rather than building something new. That made remediation planning dramatically faster.
Two things stood out. First, they were explicit about which of our controls held up under testing, not just which ones failed. That honesty made the whole report more credible and gave us something concrete to show stakeholders. Second, their remediation guidance went past "here's the vulnerability" into practical follow-through, including a step that protected our own customers rather than just closing our ticket.
The responsiveness is what I'd actually highlight. Vulnerabilities were surfaced through their PTaaS platform as they were found rather than held back for the final report, so we could start triaging mid-engagement. And when we came back with a detailed list of changes we wanted in the report, they returned a revised version within 24 hours that addressed every point - including reworking one finding's remediation advice once we'd discussed the real root cause together. That willingness to engage on the substance rather than defend the first draft is rare. Review collected by and hosted on G2.com.
Genuinely hard to find much. The one thing: the coverage and limitations detail - environment tested, roles used, endpoints actually covered - wasn't in the reporting template by default. We asked for it and they added it properly in a revised report within 24 hours. I'd rather see that as standard in the template from the start, but the responsiveness when we raised it was excellent.
Disclosure: our engagement included a post-engagement discount tied to submitting reviews. The rating reflects our actual experience and was not conditional on the score. Review collected by and hosted on G2.com.
