Best VAPT Service
-
@Emad-R said in Best VAPT Service:
We want third party easy service and no we dont want Kali Linux boxes it just wont impress the client, any ideas ?
for web applications
Why do you need to impress a client? The client should only be getting an audit report (pdf xps etc) of what needs to be fixed. Not running the system themselves - because if they knew what tool to use and how to use it, they wouldn't be hiring you.
-
It's amazing how much is done solely in the name of impressing someone.
I'm sure that the server my pharmacy client just got from their vendor (a Xeon based workstation class machine) was only used because it's HUGE and looks expensive (and really it is) but doesn't really provide any value to the client. Instead it's likely that an i7 class machine would run their Fedora based server setup just fine for their 8 users.
-
@Dashrender said in Best VAPT Service:
It's amazing how much is done solely in the name of impressing someone.
It's amazing how many people in business want to be impressed rather than profitable! That pharmacy isn't impressing customers - they never see it. They aren't impressing you - they look like idiots for wasting money. They aren't impressing their families - they don't care. It's all about impressing the owner, the only person who is even aware of the wasted money. Instead of buying a new golf cart or something for himself, he just threw that money away on a server for no reason other than impressing himself with his ability to make bad decisions.
It's a bizarre thing for people to do. Impressing ourselves with our own lack of rationality.
-
@scottalanmiller said in Best VAPT Service:
@Dashrender said in Best VAPT Service:
It's amazing how much is done solely in the name of impressing someone.
It's amazing how many people in business want to be impressed rather than profitable! That pharmacy isn't impressing customers - they never see it. They aren't impressing you - they look like idiots for wasting money. They aren't impressing their families - they don't care. It's all about impressing the owner, the only person who is even aware of the wasted money. Instead of buying a new golf cart or something for himself, he just threw that money away on a server for no reason other than impressing himself with his ability to make bad decisions.
It's a bizarre thing for people to do. Impressing ourselves with our own lack of rationality.
OK let's talk about this situation, feel free to fork this if needed.
This client has been with RX30 for 8+ years (age of old server) RX30 only offers this one solution - this ridiculously large server. it's not like the client had a choice of servers and choose the most expensive one.
Now the client did have other choices - look at other solutions.
Let's assume they did, and found the other options to be just as bad or even worse (they told me why they didn't choose a few of their other competitors in the space - mostly because they were even more expensive than RX30).How does that change your thinking about them impressing themselves?
-
@Dashrender said in Best VAPT Service:
@scottalanmiller said in Best VAPT Service:
@Dashrender said in Best VAPT Service:
It's amazing how much is done solely in the name of impressing someone.
It's amazing how many people in business want to be impressed rather than profitable! That pharmacy isn't impressing customers - they never see it. They aren't impressing you - they look like idiots for wasting money. They aren't impressing their families - they don't care. It's all about impressing the owner, the only person who is even aware of the wasted money. Instead of buying a new golf cart or something for himself, he just threw that money away on a server for no reason other than impressing himself with his ability to make bad decisions.
It's a bizarre thing for people to do. Impressing ourselves with our own lack of rationality.
OK let's talk about this situation, feel free to fork this if needed.
This client has been with RX30 for 8+ years (age of old server) RX30 only offers this one solution - this ridiculously large server. it's not like the client had a choice of servers and choose the most expensive one.
Now the client did have other choices - look at other solutions.
Let's assume they did, and found the other options to be just as bad or even worse (they told me why they didn't choose a few of their other competitors in the space - mostly because they were even more expensive than RX30).How does that change your thinking about them impressing themselves?
I would say that the customer really didn't ask the critical question.
Imagine if you went to buy your first car, and the only car you knew about was Ferrari, so you buy a Ferrari for $300,000. Then you see a Kia on the road that does the same job but is way better prices.
-
@DustinB3403 said in Best VAPT Service:
@Dashrender said in Best VAPT Service:
@scottalanmiller said in Best VAPT Service:
@Dashrender said in Best VAPT Service:
It's amazing how much is done solely in the name of impressing someone.
It's amazing how many people in business want to be impressed rather than profitable! That pharmacy isn't impressing customers - they never see it. They aren't impressing you - they look like idiots for wasting money. They aren't impressing their families - they don't care. It's all about impressing the owner, the only person who is even aware of the wasted money. Instead of buying a new golf cart or something for himself, he just threw that money away on a server for no reason other than impressing himself with his ability to make bad decisions.
It's a bizarre thing for people to do. Impressing ourselves with our own lack of rationality.
OK let's talk about this situation, feel free to fork this if needed.
This client has been with RX30 for 8+ years (age of old server) RX30 only offers this one solution - this ridiculously large server. it's not like the client had a choice of servers and choose the most expensive one.
Now the client did have other choices - look at other solutions.
Let's assume they did, and found the other options to be just as bad or even worse (they told me why they didn't choose a few of their other competitors in the space - mostly because they were even more expensive than RX30).How does that change your thinking about them impressing themselves?
I would say that the customer really didn't ask the critical question.
Imagine if you went to buy your first car, and the only car you knew about was Ferrari, so you buy a Ferrari for $300,000. Then you see a Kia on the road that does the same job but is way better prices.
I'm going to need a better example to understand what you mean? You're saying the customer should have said - hey do you have a cheaper option? I suppose they could have.
I already mentioned that they looked at several other pharmacy software/service solutions - all more expensive than RX30 - so to use your car example - they already went shopping, and new about Ferrari, Lamborghini, and Ford. Ford was the least expensive while still getting the job done, so they bought a ford.
Now maybe they bought an F150, when a Ford Ranger would have done the job... so they still possibly had a failing by not looking at all of the Ford options, but the didn't buy the Ferrari as you say.
-
Guys the client wanted third party VASP solution in the contract thus the question, do you know a good online PHP oriented code scanning service ? with reasonable pricing this is listed on there website.
I know we can scan the server and we have OpenVAS for that, but for code scanning ? why its so expensive service from what i am seeing
-
@Emad-R said in Best VAPT Service:
Guys the client wanted third party VASP solution in the contract thus the question, do you know a good online PHP oriented code scanning service ? with reasonable pricing this is listed on there website.
I know we can scan the server and we have OpenVAS for that, but for code scanning ? why its so expensive service from what i am seeing
I don't know of any services offhand for this, but it's expensive because the code base could be completely custom and the scanner needs to be configured for that custom scenario.
I would very highly doubt any vendor would publicly list pricing for something like this as it's an Hours job.
-
@Emad-R said in Best VAPT Service:
Guys the client wanted third party VASP solution in the contract thus the question, do you know a good online PHP oriented code scanning service ?
PHP isn't VAPT. VAPT is a network term. PHP would be code auditing. Good to have, but a completely different kind of service. And vastly more complex.
-
I've not looked for one before, but here are some options...
