We think we know how to explain the value of a penetration test

Welcome to the kick-off episode of the We think we know podcast! 

Whether you’re looking for a fresh perspective, to learn about and from our guest, or just to see if this podcast is worth your time, thanks for choosing to spend some time with us! We don’t take it for granted.

Today, we've got the fantastic Alethe Denis with us. Wearer of many hats and a generous contributor to the cybersecurity community, Alethe’s work covers a broad range of offensive security, from pentesting to social engineering, and red teaming, including tabletop exercises. 

In 2019, Alethe took home the top prize at the prestigious DEF CON Social Engineering CTF. She later snagged a DEF CON Black Badge, becoming a go-to social engineering expert and cybersecurity ally for companies around the world.

Sharing examples from her real-world experience, Alethe helps us break down a stubborn misconception: that penetration testing is merely a commodity, another box to tick off for compliance. 

By all means, this is not a new issue in offensive security. But it is a persistent one.

When seen as a commodity, pentesting undervalues expertise, it lowers pay, leads to superficial testing scopes, and reduces the satisfaction penetration testers get from their work.

That’s why we’re talking about it.

Alethe offers very practical tips and language you can use to highlight the value of your work and the nuances it involves. 

You’re in for a treat! 

Hacker's toolbox from this episode:

• Alethe on Twitter
• Alethe’s website
• Alethe on the Darknet Diaries - EP. 107
• Social engineering adds depth to red team exercises