Most people are looking for someone to perform a cover-your-arse paperwork exercise. By paying someone to port-scan their network, they can say "we receive regular security audits".
The fact that they haven't done a proper penetration test is immaterial.
Comments
I'm not really surprised at that reaction.
Most people are looking for someone to perform a cover-your-arse paperwork exercise. By paying someone to port-scan their network, they can say "we receive regular security audits".
The fact that they haven't done a proper penetration test is immaterial.
"our site can't be hacked, it has an SSL cert!"