A security assessment that became Rekovy's quality stamp
Client story
Rekovy had just moved sensitive data to the cloud. An independent test changed how they build, and now carries weight with treatment providers, regulators and investors.
What did you do with the findings, and what changed as a result?
We went through the report together as a team and addressed everything Syndis flagged. It was reassuring to see that our users' data was never at risk. Just as valuable was what we learned along the way. It changed how we build: we now think about who can access what from the very start of every new feature. It also gave us a clear picture of where to focus as Rekovy grows.
Has it come up since with customers, investors or in procurement?
Yes. Being able to tell treatment providers, the Ministry of Health, partners and potential investors that Syndis has tested our platform carries real weight. Syndis is a well-known and trusted name in security.
“Our users are people in recovery from addiction, so some of the data they trust us with is sensitive. Security has always been a priority for us, but as a startup it's hard to know when the right time is to spend a significant amount of money on an outside expert review. The Cyber Journey Program came at exactly the right moment.”
If someone in a similar position asked whether it was worth doing, what would you tell them?
Absolutely. It works as a quality stamp in conversations with partners and investors, especially in health tech. Security is becoming a bigger topic every year, and with the pace of AI development, that isn't going to slow down.
Thinking about a first assessment?
Most teams we work with have been putting it off. Talk to a senior consultant about what an application penetration test would involve for your product.