I think you already answered your own question when emphasizing ‘public’ there. Security isn’t fun, and at best a relief (when nothing is found). When a pentes

I think you already answered your own question when emphasizing ‘public’ there. Security isn’t fun, and at best a relief (when nothing is found). When a pentest was successful, as in, the tester got in you can be sure it’s kept under wraps. So no, I don’t think there are many, if any public records. The fact that there is shame and status involved in not being completely air tight is a big driver of the persistent insecurity of the world at large. Anonymized records would go a long way in achieving a shift to safety and awareness but as you can read here they are easily construed as stories of fiction. Everyone likes talking about that growth hack that drove a 1000% revenue increase. No one wants to talk about the database hack that spilled thousands of client records out in the open.