Good, Perfect, Best: how the analyst can enhance penetration testing results

Penetration testing is something that many (of those who know what a pentest is) see as a search for weak spots and well-known vulnerabilities in clients’ infrastructure, and a bunch of copied-and-pasted recommendations on how to deal with the security holes thus discovered. In truth, it is not so simple, especially if you want a reliable test and useful results. While pentesters search for vulnerabilities and put a lot of effort into finding and demonstrating possible attack vectors, there is …

analyst clients deal infrastructure known vulnerabilities penetration penetration testing pentest perfect recommendations results search security security holes simple test testing truth vulnerabilities well-known