Offensive Security is a broad discipline. It spans vulnerability research, reverse engineering, red teaming, application security, and more but let’s just call it penetration testing for now. Lately, I’ve seen more people express frustration after receiving subpar results from their penetration test vendors. If you’ve been there, this post is for you.