Karl Fosaaen Guest Blogs for Secure360

A resource list for aspiring penetration testers recommending books like The Web Application Hacker's Handbook, plus online training resources for self-study.

We held the Secure360 conference in the Twin Cities last week. Presentation topics included PCI, cloud computing, and problems within the security industry.

As an organization that performs a large volume of code reviews and penetration tests, NetSPI is frequently asked which type of application assessment is the best option.

NetSPI and Synack announced a KKR-backed merger combining nearly 40 years of offensive testing, arguing autonomous testing still needs human judgment to separate real risk from noise.

EchoBench is a human-calibrated benchmark for agentic AI web pentesting; a score of 100 marks parity with associate pentesters across fidelity, difficulty-reach, OWASP breadth, and repeatability.

NetSPI's Continuous AI Findings Validation applies expert review to AI-generated findings, filtering false positives and verifying severity so teams can act on model output with confidence.