Ranking / Vendor profile

Indium Software

Overall score: 16.0 / 100, rank 12 of 12
Headquarters: Cupertino, US [e-0028]
Headcount range: Not confirmed by two sources
QA-only company: No, also sells development or other services [e-0029]
Evidence verified on: 2026-11-11

Not ideal for

Situations where the published evidence does not support this vendor. Each line links to its source.

Buyers who need a named security-product reference: the one case published is anonymous and its product class is not stated. [e-0025]
Buyers who need evidenced performance or compatibility testing on security products: published cases cover automation and API testing only. [e-0025][e-0026]
Buyers who need a security-product engagement over 12 months: the evidenced engagement is about 6 months at review date. [e-0026]

Security-product QA evidence

Case studies and reviews that describe QA work on a product whose primary purpose is security. Penetration testing for other clients is excluded under the methodology.

e-0025
case-studyCase study
casestudies.com · undated · C indirect · verified 2026-11-11
tests: automation, api; client not named; vendor-reported metric: reduce post-launch defects by 80%

Score breakdown

Eight dimensions, each scored 0 to 10 by the frozen rules and multiplied by its weight. Bars are drawn from data/scores.json.

1 Security-product evidence depth weight 202.0 / 10
One verified security-product QA item. Of these, zero name the client, zero state team size or duration and one states a metric. [e-0025]
2 Product-class coverage weight 120.0 / 10
No product class is named in the verified security-product evidence.
3 Test-type depth weight 154.0 / 10
Two test types evidenced on security products: automation, api. [e-0025]
4 Engagement longevity weight 100.0 / 10
No engagement length with a security vendor is stated in the verified evidence.
5 Third-party review signal weight 120.0 / 10
No verified Clutch, GoodFirms or G2 review of security-product QA work dated within 60 months.
6 Vendor's own security posture weight 100.0 / 10
No certificate reference, SOC 2 statement, data-handling statement or security page found.
7 Team scale and specialisation weight 90.0 / 10
Headcount not confirmed by two consistent sources, 0 points; not QA-only, 0 points; no dedicated security-product QA page, 0 points.
8 Transparency weight 125.0 / 10
Two of four items present: public rate, team locations; missing: named leadership with profiles, published QA process page. [e-0028]

Product classes covered

Verified security-product QA items per class. A class counts only when the source names the product type, for example EDR¹ for endpoint or SIEM² for detection platforms.

Product class	Evidence items
Endpoint protection and EDR	0, no evidence
SIEM, XDR and detection platforms	0, no evidence
Identity and access management	0, no evidence
Network security	0, no evidence
Email and web security	0, no evidence
Data protection and backup	0, no evidence
Vulnerability and exposure management	0, no evidence
SOAR and incident response	0, no evidence
Cryptography and key management	0, no evidence
Mobile and application security products	0, no evidence

Test types evidenced on security products: automation and API. [e-0025]

1 EDR: Software that watches laptops, servers and phones for suspicious behavior, records what it sees, and alerts administrators so they can investigate and respond. Source
2 SIEM: A system that collects log data from many sources into one place so security teams can search it, correlate events and spot attacks. Source

Vendor's own security posture

Controls a security vendor usually asks of a QA partner that will handle builds and test data.

ISO 27001: Not published
SOC 2: Not published
Test-data handling: Not published
Security page or officer: Not published

Transparency

The four items scored in dimension 8 of the methodology.

Public rate: < $25 / hr [e-0028]
Leadership: Not published with profiles
QA process page: Not published
Team locations: Cupertino, US; Chennai, India; Bengaluru, India; Kuala Lumpur, Malaysia; Singapore, Singapore [e-0028]

Compare and browse

The two vendors nearest by overall score, and the facet pages that list this vendor.

Test automation facet page
North America facet page
India facet page
RFP questions to send this vendor
How to shortlist a QA vendor for a security product
Full ranking of 12 vendors

Logged corrections: changelog. Raw evidence: data download.

Scores are computed from publicly available evidence as of the verifiedOn date on each item. They describe published evidence, not service quality. Re-verify with the vendor before contracting.