Offensive/November 4, 2025
PTaaS for SOC 2 and PCI DSS: What Auditors Want
Auditors care about scope, methodology, dates, independence and remediation evidence. What that means, and where subscription testing trips people up.
Category
Offensive
Penetration testing, red teaming, and what a good report looks like.
Offensive/October 21, 2025
Seven Things Every Pen Test Report Needs
The report is the deliverable and everything else is process. Seven things a good one contains, and the tells that separate testing from scanner output.
Offensive/October 2, 2025
What Is Penetration Testing as a Service?
PTaaS replaces the annual PDF with continuous findings, retesting and a platform. Useful for some buyers, oversold to others. How to tell which you are.
Offensive/September 18, 2025
How Often Should You Run a Penetration Test?
Annual testing is the common answer, usually driven by an audit cycle. Change is the better trigger. How to decide on evidence rather than habit.
Working on this yourself?
Bring what you have. It is a faster start than beginning from nothing.