3 ms·
The only way is to make them free and build a marketplace of accredited and vetted pen testers who you charge to be on the platform. Still how the hell you vet
by andy_ppp 7y ago
The only way is to make them free and build a marketplace of accredited and vetted pen testers who you charge to be on the platform. Still how the hell you vet these people is a huge issue.
- alltakendamned 7y agoI think that's what bug bounty companies are doing by changing the model from paying for time spent to paying for (accepted) findings. Personally I don't think any serious pentester will spend considerable time in this model though. That said, I also think that one of the main challenges for buyers of pentest services these days is to evaluate the quality of a report or of the work done. Thoughts on how to improve that are most welcome.
- andy_ppp 7y agoMostly they are cookie cutter bullshit, right.
- lazyant 7y agohttps://cobalt.io/ https://cobalt.io/ works more or less like that