Written by People Who Test for a Living.
Methodology, reporting, scoping, pricing and the awkward questions buyers ask consultancies. Practical pieces that take a position, aimed at the person doing the work.
What White-Labelling Actually Buys a Testing Firm
What white-labelling actually buys a penetration testing firm: the surfaces clients notice, the ones that give a firm away, and why it changes your price.
Read the postOpen-Source Pentest Reporting: What Free Actually Costs
An open-source pentest reporting tool costs nothing to download and real hours to run: hosting, patching, backups, templates, security and client delivery.
UK GDPR for Penetration Testing Firms: A Practical Guide
UK GDPR for penetration testing firms: processor or controller, what the DPA must say, personal data found during a test, and when a breach is yours to report.
Pentest Report Automation vs Word: A Fair Comparison
Pentest report automation against Word templates and spreadsheets: what Word does well, where the hours go, and a costed example for a four-tester firm.
PTaaS for Pentest Firms: What It Means and How to Sell It
PTaaS is a delivery model, not a new kind of testing. What clients mean by it, what a consultancy must change, and how to price it and sell it under your brand.
Choosing Pentest Reporting Software: 12 Questions to Ask
Twelve questions that separate pentest reporting software that saves hours from software that moves them, from your Word template and AI key to data and price.
AI in Pentest Report Writing: A Policy Clients Will Accept
AI in pentest report writing: what it should draft, what counts as client data, local model or your own key, and a one-page usage policy clients will accept.
DORA Penetration Testing Requirements, in Plain Terms
DORA penetration testing requirements in plain terms: the yearly testing programme, threat-led testing every three years, tester rules, and what UK firms need.
Answering a Security Questionnaire About Your Pentest Platform
How to answer a client security questionnaire about your pentest platform: where findings live, who can read them and what a vendor breach would expose.
Building a Findings Library Your Team Actually Uses
How to build a pentest findings library your team actually uses: what an entry should hold, what to leave out, and how to grow it from real reports.