Before I read the Fortune article, their remarks were pretty much my initial reaction to the article. Any company that hires sufficiently good pentesters is goi

Before I read the Fortune article, their remarks were pretty much my initial reaction to the article. Any company that hires sufficiently good pentesters is going to get breached, even an infosec company. I would bet NSA probably does pretty poorly, even to this day, on their annual pentests. This isn't really news. A company that successfully fends off multiple independent pentests would be news. I've worked for a company that actually did quite well on one pentest, but the testers were pretty terrible.