Q&A with Tyler Sullivan: The Journey to CREST Certification

A resource list for aspiring penetration testers recommending books like The Web Application Hacker's Handbook, plus online training resources for self-study.

Clarifying Australia's two CREST bodies: CREST ANZ and CREST International are unaffiliated — their relationship ended in 2019, standards differ, and only International confers global accreditation.

YesWeHack's pentesting services gain CREST accreditation for EMEA and Asia after a rigorous audit — joining 300+ accredited providers — as its ISMS also reaches ISO/IEC 27017 compliance.

CREST accreditation head Jonathan Armstrong explains the value of CBEST for financial-sector vendors and how CREST certifications align with the EU DORA regulation effective January 2025.

NetSPI's Sam Horvath recounts his path from penetration tester to strategist, offering five career tips: embrace challenges, stay adaptable, seek mentorship, and build both hard and soft skills.

A curated list of 17 resources for aspiring defensive AppSec engineers, spanning security fundamentals, web application basics, hands-on practice, continuing education, and professional organizations.