Let's Talk Security Testing

In episode 4 season 2, explore the innovative world of Micro Pen-Tests - a targeted, bite-sized approach to security testing that stems from threat modelling and development changes.

Subscribe to keep up to date with all new episodes - released every 2 weeks!

In episode 3 season 2, explore the power of Threat Modelling in security testing and how it helps organisations predict, identify, and mitigate cyber risks before they become real threats.

Subscribe to keep up to date with all new episodes - released every 2 weeks!

In episode 2, season 2 of Let's Talk Security Testing, we continue the conversation on the widely debated topic of 'what can security learn from quality control'.

Subscribe to keep up to date with all new episodes - released every 2 weeks!

In episode 1 of season 2, explore techniques for using Jira tickets to enhance the effectiveness of your pentesting efforts. Meaning you can threat model your change tickets and prioritise your testing strategy.

Subscribe to keep up to date with all new episodes - released every 2 weeks!

In the second of the Let's Talk Security Testing vulnerability deep dive episodes, Ben and Tom explore access control issues. They explore:

• What are access control issues & practical examples
• How to identify access control issues
• How to prevent, find and fix them

Has the cyber security industry been ... lying to us? Do scanners provide the coverage whilst penetration tests provide the depth? Ben and Tom peel back the lid on this narrative to see if this is really the case...

In this first-of-its-type episode of Let's Talk Security Testing, Ben and Tom exclusively dive into the vulnerability, business logic flaws.

They discuss:

• How business logic flaws are created
• Where they're typically found
• Why they're unique
• Ways to optimise testing processes to find them more easily

Tom and Ben discuss:

• Determining the need for an internal pentesting team
• Setting up the team
• Key processes that lead to success

Ben and Tom discuss:

• The 3 primary sources of vulnerability creation
• A comparison of defensive cyber security approaches
• Challenges of route cause analysis

Join Ben and Tom in discussing:

• What do we mean by context in security testing?
• The reality of context in security testing
• Barriers to achieving context in security testing and how to overcome them