About pentesting, code review and the choices around them. For whoever decides what gets tested, and when.
Pentesting 6 min read
An agency or freelancer built your website and you are not quite sure what is in it. In 2026 AI finds a flaw in hours, and attackers do not look for big companies but for vulnerable plugins. What that means for you, and which questions to ask your agency.
For founders, CTOs and product owners who decide what gets tested, when and how deep. Every post starts with a short answer, so you know where you stand in a few sentences. The explanation follows, without jargon where it is not needed.
Looking for the details of vulnerabilities that were found? See Research.
Briefly describe what needs testing. You receive a proposal with a fixed price.
