Author: Sheena Sampsel

Scheduling Your Penetration Test

You’re ready to schedule your penetration test, but aren’t sure when that should be. Should it be at the beginning of the year or the end of the year? Are there industry standards that apply to scheduling your test? In this video, we take a…

Are developers slowing the progress of security?

Recently, we reviewed a report with a customer and received some interesting feedback regarding issues with mitigation. Some of the issues they were having trouble mitigating were related to supporting HTTP, and TLS versions below 1.3 instead of forcing HTTPS with TLS 1.3. Another…

What is Digest Authentication?

Digest authentication is one way of confirming the identity of a user before sending sensitive information. This is done by the web server when a user requests information in a web browser. It is considered one of the more secure methods for authentication but isn’t…

How to Tell a Real Pen Test From a Fake

If you’re struggling to understand the differences between a penetration test and a vulnerability scan, you’re not alone. Many people find themselves trying to purchase services without fully understanding what they entail. A penetration test is very different from a vulnerability scan, and understanding…

I Got My Pen Test Report and There Were No Findings?

You receive your report, and you see no findings. Does that mean we only ran vulnerability scans? This question comes up frequently. We’ve talked about the differences between a real pen test and a fake one (aka vulnerability scans). But when there are no findings,…