Lessons Learned Building a Penetration Testing Program: OWASP Portland, OR Podcast with NetSPI’s Nabil Hannan

David Quisenberry, president of OWASP Portland, discusses his transition from wealth management to cybersecurity leadership, cross-team collaboration, mentorship, and community involvement.

Contrast Security CTO and IAST creator Jeff Williams discusses how instrumentation automates vulnerability testing, his OWASP roots, and communicating findings with business risk context.

As an organization that performs a large volume of code reviews and penetration tests, NetSPI is frequently asked which type of application assessment is the best option.

For International Women's Day, 11 Bugcrowd women from engineering to pentesting share career advice on continuous learning, self-advocacy, and mentorship ahead of the Breaking Barriers webinar.

SaaS providers face rising API and multi-tenant threats; regular pentesting aligned to OWASP and PTES across the SDLC reduces breach risk and supports SOC 2, ISO 27001, GDPR, and HIPAA.

APIs expose backend logic and sensitive data directly; targeted API security testing uncovers broken authentication, excessive data exposure, and access control flaws that traditional pentests miss.