4 ms·
This comes down to the fact that penetration testing has a high false-negative rate. There's no way for a customer to really evaluate what a mostly empty report
by albntomat0 6y ago
This comes down to the fact that penetration testing has a high false-negative rate. There's no way for a customer to really evaluate what a mostly empty report means, if there actually are no bugs, or the penetration tester missed them/did a poor job.
- wayf 6y agoIt's just like going to a doctor to find if you have a disease. If they make a mistake, we have no way to find out.