Pen testing is the “easy part”. Every week I get offers from companies specialising in Penetration Tests.

No one is ever banging on my door telling me about how they are going to support the dev teams to comprehensively understand how each detail in their job impacts the end product security.

Not saying pen tests are useless. They form an important part of the process. It’s just not the hard bit.

#cybersecurity #infosec #DevSecOps #PenTest #HumanCentredSecurity #SecureDevelopment #Cyber #ExpandLeft #ShiftLeft