Penetration testing and low-cost freelancing

People are paying pentesters because their payer’s policy asks them to. Of course there will be a huge market for someone with an alleged certification to run automated tools, the value is in the box checking and report generation, not the bespoke broken website fixing.

Re: Penetration testing and low-cost freelancing

#6

Post by Spivak » Fri, Oct 23, 2020, 1:59 PM UTC

underdeserver wrote: post #4

You get what you pay for. Open ended work is hard.

And I wonder if it’s good business to be kinda bad for companies that are required to get a pen test or want to put “passed security audit” on their website.

Re: Penetration testing and low-cost freelancing

#7

Post by alltakendamned » Fri, Oct 23, 2020, 1:59 PM UTC

I’m curious which freelancing sites you got these from

Re: Penetration testing and low-cost freelancing

#8

Post by wyldfire » Fri, Oct 23, 2020, 2:03 PM UTC

tinus_hn wrote: post #2

Number 3 wil surprise you!

"Penetration Testing and Low-Cost Freelancing" would be a much better title and less clickbait-y.

Re: Penetration testing and low-cost freelancing

#9

Post by blakesterz » Fri, Oct 23, 2020, 2:04 PM UTC

"While the cost of penetration testing can be pretty high (typically between $1,000 and $100,000+),"

I've always been curious about costs for real pentesting. 1-100k is a HUGE range, that can't mean the range in cost for the same project can be that big, can it? What's it cost to hire someone to run a decent set of tests on a Rails app, for instance? Could I really see that big of a range? Would I get way better results for for $100k?

Re: Penetration testing and low-cost freelancing

#10

Post by notwhereyouare » Fri, Oct 23, 2020, 2:05 PM UTC

tinus_hn wrote: post #2

Number 3 wil surprise you!

if anything, the number 5 should be the surprising one