Advice from a Pentester to a CISO

The straight-forward-highly-opinionated security advice center.

What a pentester really wants to tell a CISO!

Penetration Testing Penetration Testing as a Service

Nov 24, 2022 by Shimon Brathwaite

Why You Shouldn’t Deal With Low Hanging Fruit Before a Penetration Test

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing Penetration Testing as a Service

Mar 31, 2022 by Alex Hewko

What is Penetration Testing, and How Does It Work?

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing as a Service

Nov 12, 2021 by Sherif Koussa

Road to Better AppSec: Comparison of Top Testing Options vs. PTaaS

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Secure Application Design

Jan 23, 2023 by Shimon Brathwaite

The Security Liabilities of 3rd Party Libraries

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Secure Application Design

Jan 16, 2023 by Omkar Hiremath

Why WAFs Are Not Enough

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Penetration Testing

Jan 9, 2023 by Omkar Hiremath

Top Vulnerabilities Found in APIs via Manual Testing

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Types of Vulnerabilities

Dec 22, 2022 by Warren Moynihan

3 Types of XSS Attacks & 4 XSS Mitigation Strategies

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

Types of Vulnerabilities

Dec 19, 2022 by Shimon Brathwaite

3 Ways Attackers Leverage User Enumeration

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

DevSecOps

Dec 13, 2022 by Sherif Koussa

Improving Communication Between Your Security and Dev Teams so Everybody Wins

Was this post helpful?

Let us know if you liked the post. That’s the only way we can improve.

No items found

1
2
3
4
5
6
7
8
9
10
11
12

Join 4000+ followers for the latest on managing application security in emerging technologies.

Advice from a Pentester to a CISO

Office

Start A Conversation