
Episode #10
The $65k Report That Missed Everything: Bang for Your Buck in Pen Testing
<p>Penetration testing is crowded with great brands and even greater illusions. </p><p>In this episode, William Wright, CEO of Closed Door Security and UK Council member at CREST, breaks down the stark difference between real pen testing and glorified vulnerability scans. </p><p>We get into how to vet providers, what a good report actually looks like, why references matter, and how threat-led testing changes the game from “find issues” to “prove business-relevant risk.”</p><p>William shares war stories: a bank test that missed an IDOR exposing transactions, a $65k engagement that produced 70+ pages of screenshots but ignored...

