KUBRA scaled its pentesting from PCI compliance to a continuous pentest program

download pdf

KUBRA was looking for quality pentesters and consistent documentation to help budget and scale security testing.

KUBRA is a renowned technology company that provides customer experience solutions for some of the largest utility, insurance, and government organizations in North America. They provide services such as billing and payments, alerts and preference management, mobile apps, and utility mapping solutions, meaning they handle a variety of critical data. As a tech company managing over 1.5 billion transactions annually, KUBRA wanted a pentest partner to ensure all of its data remains protected.

Tushar and his team at KUBRA were looking for a trusted pentest partner that would give them access to top-quality talent and provide detailed reporting to help more effectively track security improvements and budgets well.

“When we first went with Cobalt it was purely for PCI requirements but we were looking to scale our program and pentest on a more continuous basis. Cobalt gave us the ability to pentest on a frequent basis with minimum effort from our teams.”

TUSHAR CHANDGOTHIA,

VP OF INFORMATION SECURITY AND RISK MANAGEMENT

Challenges

Talent Sourcing

KUBRA found it was often expensive and difficult to retain pentesters before receiving top-notch expertise from the Cobalt Core.

Traditional Pentesting

Using outdated methodologies associated with traditional pentesting often led to inconsistencies with finding and reporting.

Need to Maximize Resources

KUBRA was looking for quality reporting that would help them more effectively track improvements and properly budget.

Results

Global Talent Pool

Cobalt provides access to a global pool of nearly 400 pentesters with a variety of backgrounds and talent.

Real-Time Findings

Cobalt understands Verifone’s needs and doesn’t back down when it comes to addressing their specific needs.

Detailed Documentation

Cobalt allows KUBRA comprehensive, consistent, and standardized documentation and reporting.

Cobalt’s PtaaS platform bolsters security by discovering vulnerabilities and giving KUBRA the opportunity to act on remediating those areas of weakness in real-time. Security teams can stay ahead of fixing issues as they arise instead of waiting until the test is complete, and sharing key takeaways with stakeholders is a breeze.

KUBRA came to Cobalt for a single pentest but quickly realized the potential to nurture and expand their entire security testing program. As a result, they’ve hardened their security posture with a security chaos engineering mentality of frequent testing that builds resilience.

"We went to Cobalt for a single pentest but we loved the process and results, so we continue to go back - Cobalt saves us time and provides us with quality results on a consistent basis.”

TUSHAR CHANDGOTHIA,

VP OF INFORMATION SECURITY AND RISK MANAGEMENT

Cobalt PtaaS + DAST combines manual pentests and automated scanning for comprehensive applications security.

Cobalt PtaaS + DAST combines manual pentests and automated scanning for comprehensive applications security.

KUBRA scaled its pentesting from PCI compliance to a continuous pentest program

KUBRA was looking for quality pentesters and consistent documentation to help budget and scale security testing.

Want to see the Cobalt platform in action?

This is a title

This is a title

This is a title