About

Actually Exploitable

A blog and newsletter on What real penetration testing looks like versus checkbox compliance exercises, How to evaluate and buy a penetration test (questions to ask, red flags to spot), and SOC 2, HIPAA, and ISO 27001 compliance requirements and how pen testing fits in.