---
id: 2748
title: "Benchmark Analysis: Annual Pentest and Code Review Coverage"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/benchmark-analysis-annual-pentest-and-code-review-coverage"
published_at: "2022-07-14T16:00:00Z"
tags: ["devsecops", "code-review", "sast", "penetration-testing", "application-security", "dast", "benchmarks"]
phying_url: "https://phying.com/item/2748"
lang: en
---

# Benchmark Analysis: Annual Pentest and Code Review Coverage

## Summary

HackerOne benchmarks how many annual pentests, code reviews, and SAST/DAST scans organizations should run, scaled to release frequency, app criticality, and digital maturity.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2022-07-14T16:00:00Z
- **Original:** https://www.hackerone.com/blog/benchmark-analysis-annual-pentest-and-code-review-coverage
- **Phying News:** https://phying.com/item/2748