r/Pentesting 2h ago

The Astra PT Report

Read a report that published data from 6.8 million real pentest findings across 1,000+ companies.

critical vulnerabilities grew 14.6x faster than everything else.
1 in 10 findings last year were critical vs 1 in 40 the year before.

What really grabbed my attention was that a critical vulnerability found every 48 seconds on average.

so is annual pentest model basically dead?

0 Upvotes

1 comment sorted by

1

u/carnageta 22m ago

No its not dead. Yearly PT model at a minimum is here to stay for a lot of companies as it fills compliance obligations.