Authored by: PlexTrac Team Posted on: January 23, 2024 Core Networks Information Security Doubles Service Capacity With PlexTrac An interview with Core Networks President Albert Mimo PlexTrac’s content strategist, Anna Lee, caught up with long-time client Albert Mimo with Core Networks Information Security at Wild West Hackin’ Fest. They sat down for an interview about how PlexTrac has helped transform his offensive security consultancy. Anna: Tell me about your business — where your focus is and who your customers are. Albert: I’ve led Core Networks Information Security for 18 years now. We are a security consulting company that concentrates on preparing organizations to withstand the latest threats and rapidly recover from security incidents. We specialize in all types of pentesting like web application, network, cloud security, and more. The majority of our clients are medium to large-sized businesses. In web app pentesting especially, the reports are huge because there are hundreds of pages we are testing. Often every site they have will have the same vulnerability, so it can be a nightmare reporting all those findings. Can you imagine trying to do that in Microsoft Word? Even with a good template, it’s a ton of work. So my pentesters, when they’d go to write the report, used to roll their eyes because it is the worst part for them even though they know it is the most important part for the business. We do a lot of manual pentesting. We aren’t just running tools — every single site we go through every single page and every single form. So it produces a lot of results to manage. Anna: Tell me a little bit about your experience with PlexTrac to help you out with your reporting inefficiencies. Albert: I remember for a long time I had been looking into trying to make the drudgery of pentesting — which is the reporting part — easier, and I found nothing. Then I met Dan DeCloss at a conference, maybe even this one, and after talking to him about PlexTrac, I thought, “I think I’ve just found what I’ve been looking for because this is awesome!” We adopted PlexTrac very early on, and I have to tell you PlexTrac has saved us so much time. Using PlexTrac for managing the pentest means that you have a repository to consolidate all your results and you can import them in and tweak them and even share them online with your clients [via a client portal]. You’re not delivering just a piece of paper, but now a client experience. There are so many features of PlexTrac that our clients love. Anna: So how would you say PlexTrac has improved your business? Albert: I would say PlexTrac has enabled us to comfortably schedule 50% to 100% more pentest engagements than we were able to before. Reporting was taking us that long — up to two weeks of report preparation and review while juggling other engagements. With PlexTrac we now complete reports in two to three days. We can review the report with the client sooner and more thoroughly and efficiently. PlexTrac saves us so much time in our pentest reporting that it more than pays for itself — it makes us money in additional work we can take on and better value we can provide. Read the full Core Networks case study or request a demo to see how you can eliminate the pentest reporting drudgery with PlexTrac. PlexTrac Team Editoral Group At PlexTrac, we bring together insights from a diverse range of voices. Our blog features contributions from industry experts, ethical hackers, CTOs, influencers, and PlexTrac team members—all sharing valuable perspectives on cybersecurity, pentesting, and risk management.
Introducing PlexTrac Enabled MCP Co-Authored by Victoria Mosby & Jerry Bruns Your board meeting is in two hours. The CISO needs a portfolio risk summary. You know the data is in PlexTrac. Getting it into something presentable? That is going to take the rest of your morning: export from each client, pivot in Excel, build the charts, copy into... READ ARTICLE
Moving Beyond Vulnerability Lists to Real Risk Reduction On a recent PlexTrac Friends Friday Podcast, our founder, Daniel DeCloss, sat down with Paul Nieto III, a seasoned red team operator at Royal Caribbean, to unpack how his organization built and scaled a purple teaming program that runs continuously, not just once a year. READ ARTICLE
The Hidden Cost of Siloed Security Data Why visibility, not volume, is the real security advantage Security teams today are overwhelmed by data overload. Vulnerability scanners surface thousands of issues at a time. SIEMs generate a constant stream of alerts. Cloud platforms flag misconfigurations. Penetration tests provide detailed narratives about real-world attack paths. Ticketing systems track remediation. Risk teams maintain registers. Leadership... READ ARTICLE