A practical technical guide to giving an authorised penetration test a narrow, temporary path through Vercel, Cloudflare, Akamai or AWS WAF without dropping the rest of your security controls.
Josh KamNews and insights
Security decisions should feel clearer.
Practical perspectives on buying a penetration test, understanding what was found and deciding what to do next.
Josh KamShowing 6 of 14 articles
“Go Get a Pen Test.” Now What?
An urgent penetration-test request can feel exposing and unclear. Here is how to turn it into a controlled plan without adding unnecessary stress.
Josh KamRead What Does a $99 Pentest Actually Buy? Turns Out, Some Things Are Too Cheap.
A $99 penetration test sounds like an easy answer to an uncomfortable request. Before buying, ask whether the economics leave enough room for thorough testing, useful evidence and findings your team can trust.
Josh KamRead Scan or Pentest? Buy the Evidence You Actually Need.
Scanning and penetration testing both have a role. The difference matters when someone needs evidence of what an attacker could actually do.
Josh KamRead It’s “Only a Medium” Until You Join the Dots.
Severity scores help teams prioritise, but isolated ratings can miss the attack path created when several weaknesses work together.
Josh KamRead Why Expert Human Judgement Matters in AI Security Testing
AI-powered testing provides speed and breadth. For complex, regulated or high-risk environments, a specialist penetration tester adds hands-on testing and expert human judgement.
Max SnowRead An Authentication Hardening Checklist for SaaS Teams
Authentication is the front door to your application, and it's tested in every engagement we run. This checklist covers the controls that separate resilient login flows from fragile ones.
Max SnowRead