Sprocket Security

What do you like best about the product?

I love how the portal is laid out and access to view things. I also love in the findings how it gives links and pdf documents on how to resolve and fix the findings

What do you dislike about the product?

I havent really found anything yet that I dont like

What problems is the product solving and how is that benefiting you?

It benefits finding findings from external and internal pen testing to help fill all the gaps

What do you like best about the product?

Sprocket Security provide a personal approach to continuous penetration testing / offensive security company. Their setup was straight forward, and the human component of the testing is critical to me.

What do you dislike about the product?

There really isn't anything that I don't like about Sprocket Security

What problems is the product solving and how is that benefiting you?

Sprocket gives us continuous penetration testing so we can identify and validate real vulnerabilities before an attacker has a chance to exploit them. It helps us focus on the issues that present actual risk instead of spending time chasing every vulnerability a scanner finds.

What do you like best about the product?

The people at Sprocket Security. The people are very knowledgable but they are also willing to help. You can ask questions on tactics or remediation and they will guide you as much as they can.

What do you dislike about the product?

As they have grown, it has been harder to get the personalized feedback that was available when they were a smaller company. Response times have also become slower.

What problems is the product solving and how is that benefiting you?

They are always looking at our environment and watching for possible ways that attackers could get in to our environment.

What do you like best about the product?

Sprocket has been able to help us get a deeper view into the security of our environment. Their findings have been spot-on, and they always include the full details on how the issue was found, and not only that, also how to fix it as well. They are always available for questions, and respond quickly. The web portal to manage findings is also easy to use and easy to find what you are looking for.

What do you dislike about the product?

Things like managing networks in scope are manual, and when they automatically branch to new hosts, they often end up finding issues with systems that arent ours. It would be wonderful to have it pick up our internal networking automatically somehow.

What problems is the product solving and how is that benefiting you?

Sprocket has does an amazing job finding issues that our IT team doesnt notice themselves, and often these issues were caused by the IT team in the first place (misconfigurations usually).

What do you like best about the product?

I appreciate the ongoing pentesting with Sprocket Security, which has been very good and thorough, providing detailed exploit POCs that are helpful in fixing issues. The Jira integration is also beneficial for obvious reasons. The platform UI is decent and the initial setup was fairly easy.

What do you dislike about the product?

The communication and response times are very lacking from their support teams after a pentest is complete, which led to drawn-out times getting fixes marked remediated. Additionally, we had a bad experience with a tester in regard to a particular finding they could not offer detailed technical explanation about, which also drew out the length of time it took to mark remediated and has left us with outstanding unresponded-to comments/questions. It often took us over a week to get a retest on a fix once we marked it retest ready. Additionally, the contract renewal process was less than ideal. From a pricing standpoint, they forced a 5% increase on us after our first year and didn't bat an eye when we threatened to RFP. From a legal perspective, they were wholly unwilling to negotiate for a more mutual contract, to the point where our legal team reached out to me to tell me the lack of partnership was alarming (I haven't heard from them before for any other vendor).

What problems is the product solving and how is that benefiting you?

Sprocket Security provides detailed penetration test reports necessary for compliance and customer surveys. The ongoing pentesting and Jira integration streamline our workflow, and the thorough POCs help identify fixes.

What do you like best about the product?

The UI is very easy to use, the thorough pen testing helped us find a lot of security issues in our product, and the advices on how to fix the issues helped us quickly fixed the issues. And the unlimited retesting is very handy. The customer support is very helpful when we have any issues using the product.

What do you dislike about the product?

There is not much that I dislike. The only thing could be there are too much information in the report to be digested.

What problems is the product solving and how is that benefiting you?

Helped scanning our products to identify any security issues, and it indeed found several security issues.

What do you like best about the product?

As a customer who has worked closely with Sprocket Security, I can confidently say they are one of the most professional and skilled cybersecurity teams I’ve had the pleasure of working with. Their expertise in penetration testing is top-tier and they have consistently gone above and beyond to ensure our organization’s security posture is robust and resilient!

What do you dislike about the product?

At this time there are no issues we have had with Sprocket Security

What problems is the product solving and how is that benefiting you?

Sprocket’s penetration testing is helping find vulnerabilities in our web application ones that automated tools can’t detect

What do you like best about the product?

Ease of use, implementation, and support.

What do you dislike about the product?

There is not a single thing I dislike about the Sprocket Security team or platform.

What problems is the product solving and how is that benefiting you?

Sprocket helps us go beyond compliance requirements and dives deep into true vulnerable aspects the company actually faces. Some Pentest groups are just glorified vulnerability scanning. The Sprocket team adds so much value to the product with their knowledge, description of their work and findings, and how to remediate those findings. They are always quick to respond, and the ability to add a continuous functionality to the work adds enhanced security coverage to the organization. We all know emerging threats can spawn overnight. The last thing you would want would be to employ a one-time Pentest group that only covered 1 month out of the year, leaving your organization open to these threats the remainder of the time.

What do you like best about the product?

Sprocket Security's team, web interface, and responsiveness is top-notch. Having the flexibility to have my environment assessed on a regular basis instead of once a year keeps me and my team constantly on top of vulnerabilities in my environment. The web interface is nice and clean, concise, and allows me to request for re-tests of found vulnerabilities. The interface also has new findings, comments, and allows for easy communication without having to open a complicated ticket. Their team also has allowed me to contact them directly with questions, issues, or requests. They really make it easy for me to use their system in a way that works best for me.

What do you dislike about the product?

Sprocket Security doesn't have anything specific I dislike, except for the fact that it doesn't integrate with any of my security stack. This isn't a big deal, but it causes false positives with my alerting tools by notifying me that the Sprocket host is malicious. It can make it difficult to add to the Allow list to reduce the noise.

What problems is the product solving and how is that benefiting you?

Continuous penetration testing to keep a constant eye on my environment's vulnerabilities so I can proactively react.

What do you like best about the product?

Sprocket Security provides highly detailed and actionable penetration testing reports that are easy for both technical teams and leadership to understand. Their team is responsive, knowledgeable, and consistently goes above and beyond to support our security goals.

What do you dislike about the product?

Great service and findings, but expanding the frequency of communication during testing phases would help keep all stakeholders better informed. Our SIEM and other tools pickup "malicious" activity, but it ends up being a false positive.

What problems is the product solving and how is that benefiting you?

Sprocket Security is helping us identify and remediate vulnerabilities through thorough penetration testing and continuous security assessments, which strengthens our overall security posture. Their clear reporting and expert guidance make it easier for our team to prioritize risks and demonstrate compliance to leadership and auditors. I really like the remediation actions section when a vulnerability is discovered.