Notes de terrain sur la sécurité offensive, la conformité et le métier du pentest.
Rédigé par les testeurs, ingénieurs et opérateurs qui mènent les missions SecureBlock. Long format, occasionnel, sans remplissage marketing.
methodologyphilosophy
En vedette
Why we do manual pentesting
Scanners find signatures. Attackers chain business logic. Here's why every SecureBlock engagement is human-led, and why that changes the finding mix.
Marta Kovač 18 juin 2026 5 min read
Lire l'article Tous les articles
3 entréespricingproduct
How we scope in under two minutes
A discovery call, a scoping spreadsheet, three follow-up emails, and a quote three weeks later. We rebuilt the whole thing as a four-question form. Here's the rubric behind it.
Luka Šikić·27 mai 2026·6 min read
compliancesoc2
A field guide to SOC 2 evidence packs
The awkward gap between a great pentest report and the evidence your SOC 2 auditor actually wants to see. What we put in the pack, and why.
Mirna Novak·11 avril 2026·7 min read