Seek experience, technology stack used, security practices, the industry the company operates, clarity of the communication and a portfolio of done work.