pentest

Stop counting findings

Pentest reports are calibrated to finding count, not exploitability. The metric the buyer evaluates becomes the work product.