RE: Evaluating pentesters

[security curmudgeon <jericho () attrition org>]

On Thu, 11 Mar 2010, Frye, Dan wrote:

: Does anyone know if a "bakeoff" of pentest vendors has ever been done? 

Yes, frequently. For many large contracts, especially web application 
testing, vendors will do a bakeoff to assess firms and their ability to 
audit the target environment.


------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------