Re: Pen-testing - pricing model

[Christine Kronberg <seeker () shalla de>]

On Sat, 9 Dec 2006, Kish Pent wrote:
> Hello all, :)
> I totally agree with carnevali davide, he's absolutely
> right because pen-test pricing is based on man hours
> put in for the work, not the goals or skills.

  But your skills relate to the time you need to do the
  test. I rather decline a pen-test if I see that I cannot
  do the job in a reasonable time. Knowledge and efficient
  deployment of knowledge are skills.
  How much time will it take if you do not have a clue what
  to do, if you have no idea what the results of your tests
  mean? Do you really think you can sell that to the customer
  without profit loss?

  Cheers,

  Chris.



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------