We’re all familiar with network pen testing, and many organizations port those processes and vendors over to application pen testing. There are very few resources on how to work with application pen testers. Furthermore, the resources providing the quality of pen testing organizations is scarce. This talk will discuss how to choose an application pen tester, how this process is different from network pen testing, and how to manage the process and individual engagements. For the pen testers in the audience, I’ll give you pointers on how to engage with your clients and add value to your engagements.

Back to GrrCON 2014 video list