I too worked for NCC Group. Before joining we spoke and you sent me a copy of the Web App Hackers Handbook and The Art of Software Security Assessments. I then

I too worked for NCC Group. Before joining we spoke and you sent me a copy of the Web App Hackers Handbook and The Art of Software Security Assessments. I then worked for NCC the following 5 years. Yes report writing was the worst and half the week was easily dedicated to that. PM’s and account managers pushed Friday readouts so it was a high priority so you would stay late to finish everything before you started another assessment the following Monday. Readouts for last week and kick off for a new project on the same day we’re the worst but happened every so often. It was never find a bug, report and move on. It was dedicate the whole day to making it clear, presenting to the client and integrating feedback. Don’t get me started on review. Every client doc had to have 2 reviews including from at least one senior and they put it off as much as possible.