Penetration testing, or pen testing for short, has long been a check the box activity for many organizations. Vulnerabilities are identified; however, very little is done to check that the repair has been completed, much less new vulnerabilities identified. That approach is changing. Continuous pen testing brings with it a near real-time identification of issues and Penetration Testing as a Service (PTaaS) provides you with the eyes on the screen you may be lacking today. Darren Manners, Founder of RedSpy³⁶⁵, joins Status Go to talk about this evolution in pen testing.

Podcast: Play in new window | Download

Subscribe: Apple Podcasts | Spotify | Email | RSS

Darren Manners is a seasoned IT professional specializing in Penetration Testing, Compliance, Security Awareness, Social Engineering and other forms of Offensive Information Security Practices. He spent the early part of his career with the United Kingdom Royal Naval Intelligence earning nine years’ experience as a Communication Technician Analyst. Over the next 12 years, he worked in various security roles with VAR’s achieving several certifications including SANS GSE (#42), CCIE security (18929), OSCP, CISSP, and others. Darren has written papers outlining iPhone backup files for penetration testing and anomaly detection using user agent headers. Other accomplishments include being the designer of Sphere of Influence (security visualization tool) and Ice-hole (email phishing tool).