News for hackers. Stuff that matters.

A comment on Penetration testing and low-cost freelancing.

Re:Penetration testing and low-cost freelancing by albntomat0 on Friday October 23, 2020 @10:08AM (#24869647)
This comes down to the fact that penetration testing has a high false-negative rate. There's no way for a customer to really evaluate what a mostly empty report means, if there actually are no bugs, or the penetration tester missed them/did a poor job.
[ Parent | on HN ]
Re:Penetration testing and low-cost freelancing by wayf on Friday October 23, 2020 @10:47AM (#24870027)
It's just like going to a doctor to find if you have a disease. If they make a mistake, we have no way to find out.
[ Parent | on HN ]