Working with Fortbridge on our recent penetration test was an excellent experience from start to finish. The team were highly professional, organised and a pleasure to deal with throughout the engagement. They took the time to properly understand our business, our product and the context in which we operate, which made their approach feel tailored rather than generic. Communication was clear and consistent at every stage, with expectations set early and updates provided regularly. The quality of the testing and reporting was outstanding, with findings presented in a way that was both technically rigorous and easy for stakeholders to understand. We felt genuinely supported throughout the process and would not hesitate to work with them again.
CISO, AI-Powered Biotech
Penetration Test
Adrian and his team provided an extremely in-depth and rigorous pen test of our platform. After many years of the platform being pen tested, this felt like the first time our system was really put through its paces. I am pleased to say that our controls stood up well, but Adrian did find some high vulnerabilities that we were unaware of. Adrian not only does a great job of thoroughly testing complex environments, he also takes the time to go through the report, understand the controls we have in place, and offers a balanced view on where adjustments are needed, providing excellent advice on the most effective form of remediation. This was the first time we had used Fortbridge and we will definitely be using them again. I would encourage others to do the same
CEO, SaaS Cybersecurity Platform
Platform Penetration Test
We were very pleased with the pen test Fortbridge performed on Concrete CMS hosting and the application vulnerability test they did on the open source Concrete CMS. We chose Fortbridge to conduct the assessment this year because of their numerous HackerOne reports and remediation collaboration in the past year to selflessly improve the open source Concrete CMS. Despite a contract specifying UK working hours, Fortbridge went over and above and worked UK evenings in order to overlap with the Concrete CMS’ team’s PST hours. They communicated daily and the collaborative back and forth meant not only were we kept informed but we could guide the testing to ensure that no time was wasted. We were left confident that they were doing a thorough job. We appreciated no surprises in the initial report. Our team was deeply impressed that the brothers identified vulnerabilities which could only have been found by a deep analysis of the source code. A huge plus with choosing the boutique two brother Fortbridge team is that you are certain to get the firm’s pen testing experts. The knowledge they gain about your environment and products one year will lead to an even more efficient and thorough test in future years.
CISO, PortlandLabs (Open-Source CMS)
Application & Infrastructure Penetration Test
We operate a popular website with optional subscriptions and a powerful API. Fortbridge has done an excellent job of scanning our systems for vulnerabilities and providing immediate feedback on which we could act quickly. We will use Fortbridge again.
CTO, Big Data & Service Provider
Web Application & API Penetration Test
Both Adrian and Bogdan are fantastic to work with and exceptional at what they do, in providing top notch security expertise, consultancy, and penetration testing. They provide high quality work and go above and beyond to identify critical vulnerabilities, and ensure risks are understood and mitigations clearly defined and validated. It is always a pleasure working with FORTBRIDGE and I look forward to continue doing so in the future.
Head of SecOps and Incident Response
E-Commerce Retailer
Fortbridge is one of our prefered pen testing suppliers and has carried out pen tests for our various applications. The two consultants Adrian and Bogdan are both very knowledgeable on carrying out security assessments and carry them out with care and consideration to end user impact. The findings are of very high quality, and the narrative approach to finding descriptions help our internal test teams understand the methodology to finding vulnerabilities. Reports are delivered very quickly, and the prioritisation or criticality of the findings are of high quality and the recommendations are actionable and concise. I look forward to future engagements.
CISO, Online Property Platform
Application Penetration Testing
Bogdan and FORTBRIDGE demonstrated a high level of performance, becoming a major contributor into improving our security posture. His attention to details was key to helping teams remediate issues in a timely and satisfactory manner. Given the above, I would like to re-iterate that Bogdan Tiron and FORTBRIDGE was highly rated during his engagements and as a result I want to reiterate my confirmed recommendation.
Director of IT Security, Data & Analytics Firm
Security Assessment
It was a pleasure working with Bogdan. He is a very professional, honest and sociable person. He found high impact vulnerabilities and provided top quality reports to the development teams. He jumped on call with developers and made sure the critical vulnerabilities were fixed on spot and also held read-outs to developers and executives to make sure all findings are crisp clear. If top quality pentests and trainings is what you are looking for then Bogdan can definitely help you.
Product Security Leader, Banking Sector
Penetration Testing & Security Training