BambooHR

Background

As the number 1 online HR software for small and medium business, BambooHR knows the importance of protecting personal data. In an effort to increase their data security, Systems Administrator, Shawn Neibaur, found a partner in security to help walk BambooHR through a manual penetration test and remediation efforts.

“It has always been a pleasure to work with SecurityMetrics. Their expertise, efficiency and accuracy make them an essential cornerstone of BambooHR’s security foundation.”
Shawn Neibaur
Systems Administrator

Challenges You Faced With Data Security

• Our application security was only reviewed internally, meaning that biases were not properly controlled for within the company culture.
• Vulnerability scanning, analysis and remediation can be a resource-intensive internal process for our development and IT teams.
• Internal vulnerability remediation may miss issues with the application due to time constraints, or a vulnerability may seem remediated when there is actually still a different way to exploit it.

Resolving Challenges With SecurityMetrics

• Having SecurityMetrics thoroughly test our application through manual penetration testing helps us find logic and design flaws that we wouldn’t have found due to groupthink.
• SecurityMetrics’ team of penetration test analysts gives us the manpower necessary to perform a deep analysis of our application, setting us free to focus on building the best product possible.
• Our annual penetration test gives us outside validation for our internal processes. Thanks to this validation, we know where our vulnerability scans properly resolved issues and where new training, scan logic or processes are necessary.

Goals Achieved Working With SecurityMetrics

• Received a thorough penetration test of our application and feel confident about its security.
• Freed up internal resources to continue improving our product and customer experience.
• Gave us direction and validation on data security efforts moving forward.
• Found a reputable, helpful partner to assist with ongoing penetration tests and data security needs