Faster, cheaper, and far more of it. The question is not whether AI replaces pentesters – it is which pentesters survive, and what they will need to be able to do.
“Just Send Me a Quote and We’ll See” – Why I Don’t Work That Way
A prospective client asked for a price before telling me what the systems do. In security testing, a quote without a scope is a guess, and the person who pays for the guess is the client.
“We Don’t Need a Pentest. You Won’t Find Anything.”
That was the first sentence out of a client’s mouth. They had tested a month earlier, with a generic vendor, because a customer required a report. Their systems really did look impressive.
The Previous Test Found Nothing. We Found Account Takeover.
A client came to us after working with another vendor whose report said everything was fine apart from minor findings. Data theft, identity tampering, denial of service and admin account takeover were all still sitting there.
“Would You Like to Write a Book About That?” – How One Talk Became a Book and a Company
Two people from Syngress came up to me as I came off the Black Hat stage in 2009. Saying yes meant leaving a salaried job, with a mortgage and a baby on the way. AppSec Labs exists because of that decision.