The Practicalities Of Pentesting At Scale
summary
Enterprises historically test only 10% to 63% of apps but Cobalt's data shows real improvement: 10,000+ manual pentests since 2016 and analysis from ~3,000 tests in 2022. Smaller teams fix a higher percentage of findings. Modernize by adopting PTaaS, integrate findings into Jira and Slack via APIs, aim to start manual tests within 48 hours, and follow a four-step model: govern, find, fix, prevent.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 3:23Pentesting critical for security
- 9:23Cybersecurity stagnation
- 14:56Software development evolution
- 17:22Modernizing pentesting with cloud
- 24:362023 pentesting report findings
- 26:50Pentesting maturity model
- 27:54Scaling manual pentesting
- 30:23Fixing known vulnerabilities
- 31:50Q&A
related talks
50mThe Practicalities of Pen Testing at Scale
26mBeyond Testing: Application Security in the Age of DevOps
23mHack Your Cybersecurity Career: Your Role in the Ecosystem
44mApplication Security: Everything we know is wrong
56mBuilding An Effective Application Penetration Testing Team
29mHow to run a Pentesting Engagement
52mApplication Penetration Testing – DOs and DON‘Ts
52mApplication Security at DevOps Speed and portfolio scale