From launch to conclusion, Include Security uses SendSafely to protect all phases of the client engagement.
Include Security, a leader in cyber security consulting, specializes in uncovering software vulnerabilities for high-profile clientele — from Fortune 500s to emerging tech startups. Their mission: deliver top-tier security services, penetration testing, and tailored offensive assessments without compromising client confidentiality.
Our collaboration with SendSafely redefined our client engagement model. We've seen tangible improvements in client satisfaction and internal process efficiencies, all while maintaining top-tier security standards.
A user-friendly solution that reduces client friction while meeting SOC2 Type II.
Securing sensitive client data has always been a cornerstone of Include Security's operations. The company needed a solution for protecting highly confidential information — exploitable application vulnerabilities, source code, credentials — that could comply with contractual obligations and regulations such as SOC2 Type II, where encryption at rest and in transit is mandated.
Include Security was previously using legacy PGP to encrypt their deliverables. Approximately 40% of clients struggled with this complex encryption, leading to delays and frustration in the project delivery process. The desired solution needed to reduce that friction as much as possible.
Robust encryption for data in transit and at rest, comprehensive audit logs, and a workflow simple enough that non-technical clients adopt it without training.
Three engagement phases, one secure platform
Include Security implemented multiple SendSafely features into their client engagement workflow, streamlining secure file management and communication from project start to finish.
- Phase 01Project Launch
At the outset of every engagement, Include Security uses the Dropzone secure file upload to facilitate seamless collection of client assets and artifacts — eliminating the encrypted-email back-and-forth that historically delayed kickoff.
- Phase 02Project Execution
During execution, internal teams use Workspaces to store sensitive assets — SOWs, credentials, and software artifacts. A Workspace is created for each client engagement, provisioned for "need to know" team members, and bookmarked to an engagement chat channel for easy access. A custom integration built with the SendSafely Python SDK automates collection of client artifacts from 3rd party systems.
- Phase 03Engagement Conclusion
At conclusion, Include Security uses Secure Send to deliver reports — often containing highly confidential vulnerability information — to the client easily and securely. Clean-up is one click: the Workspace is deleted, and client data is purged from their systems.
SendSafely delivers measurable results.
Client Experience
Encryption struggles dropped from 40% to 1–2%, with a 38% lift in satisfaction scores for secure file sharing.
Compliance
End-to-end encryption and audit logs supported SOC2 Type II certification across all client data handling.
Efficiency
Automated workflows via the API saved a minimum of 50 hours/year, freeing the team for assessments.
“The best products are the ones that users don't have to think about because they just work. SendSafely has always been one of those products for us and our clients.”
Include Security · Hacking Team MemberSee how others protect what matters.
How Unity keeps secrets a secret, no matter which tool the team is in
At Addepar, safeguarding client information is part of the business — and part of every exchangeProtect every file. Every exchange. Every time.
Find out why companies across the globe use SendSafely to protect the security and privacy of their confidential data.