Penetration testing is still largely misunderstood among companies and new information security practitioners.  My guest this week, Brad Ammerman, has been poppin' boxes since 2005 and has unique perspectives surrounding how penetration testing actually works.  In this episode, we talk process, tool, people, and clear up misconceptions of what a penetration test entails (as opposed to a vulnerability scan and red team exercise).