Test your defenses against a nation-state level attack

Posted by kstrauser 3 hours ago

Counter7Comment6OpenOriginal

Comments

Comment by runsfromfire 27 minutes ago

I’m not sure my business is the target demographic for this, but I do want to say - I am all-in on factory’s product as the sole technology steward of a niche small business.

Factory is leagues ahead of any other out-of-the-box harness. It’s a product I regularly recommend when consulting and chatting with peers. Seriously, hats off to you all for building a truly differentiated product in an increasingly bloated market segment. I’ll be a happy customer as long as you still have an offering suitable for the little guys.

This looks like a genuinely fun exercise in security. What size/category of businesses are you primarily looking to bring into wargames? Can you share more about what a typical simulated attack/report/fix cycle looks like and how long you anticipate a partnership to last?

Comment by kstrauser 3 hours ago

In summary, we're accepting applications to use our AI system to pentest your system, and help fix the findings, for free. What do we get out of it? Someone to partner with as we test the platform we're building.

You can email me at kirk@factory.com if you have questions you'd rather ask privately.

Comment by terezatizkova 3 hours ago

Depends what the nation would be. :d But love the idea

Comment by kstrauser 3 hours ago

That's negotiable, between "bored kid in South Dakota" and "North Korea".

Comment by AnimalMuppet 3 hours ago

How good is your spoof detection game?

If I say that Joe Schmoe, CTO of Widgets, Inc., and I want you to test widgets.com and show me all the vulnerabilities, how sure are you that I'm actually with that company? Even if I actually work for the company, how sure are you that I'm not actually a rogue employee who's going quit the moment I get the report?

Comment by kstrauser 3 hours ago

Pretty good. This is a B2B sort of engagement, where we'd end up having our legal team negotiate with Joe's, and so on. We work with lots of enterprise clients and have controls around that sort of thing.