Let's Talk Security Testing
by Ben Armstrong, Thomas Ballin
Latest episode
What the hell happened to PTaaS?
What the hell happened to PTaaS?
About this podcast
Your hosts, cyber tech founders Ben Armstrong and Thomas Ballin, have been increasingly frustrated with security testing's archaic approach. So they set about solving the problems they encountered themselves and created the Cytix platform.
In the same spirit, they're bottling these thoughts, experiences and anecdotes into honest and transparent 30-minute sessions to open up the discussions with you.
Let's Talk Security Testing is a podcast to challenge norms in cyber security testing for industry thought leaders ready to take on a new approach.
Episodes
The newest 20 of 34 episodes
- What the hell happened to PTaaS? · 17 min · Season 4 Episode 3In this episode of Let’s Talk Security Testing, we revisit PTaaS (Pen Testing as a Service) — a buzzword that never quite settled on a definition. Was it just pen testing with a…
- Did Anthropic Just Solve AppSec? · 35 min · Season 4 Episode 2Anthropic recently announced a new code analysis capability that’s sparked a lot of discussion across the AppSec community. In this episode of Let’s Talk Security Testing, we…
- The AppSec Reality Check with NCC Group · 39 min · Season 4 Episode 1AI is reshaping how software is built. But is it reshaping how it’s secured? In this episode, we’re joined by NCC Group to explore what’s really happening across the AppSec…
- The Reality of Agentic Application Security · 34 min · Season 3 Episode 11Agentic AI is the latest shift in application security, but how much of it is delivering real results? In this episode, we break down: - What “agentic” really means in AppSec…
- Is AI Pentesting Just DAST in Disguise? · 33 min · Season 3 Episode 10Is AI Pentesting Just DAST in Disguise? 🤖💥 Everyone’s talking about AI-powered pentesting - but is it actually useful, or just dressed-up DAST? In this episode, we dig into…
- Does CAB Still Belong in Modern DevSecOps? · 24 min · Season 3 Episode 9In Season 2, Episode 9, we ask a big question: does the Change Advisory Board (CAB) still have a place in today’s fast-moving DevSecOps world? Traditionally seen as a gatekeeper…
- Is Vibe Coding a Developer Superpower or a Security Risk? · 27 min · Season 3 Episode 8In Season 2, Episode 8, we throw planning out the window and build a web app purely on vibes. No specs, no structure, just straight-up code. Then, we do what any responsible team…
- Who Wins at Threat Modelling: AI or a Real Hacker? · 19 min · Season 3 Episode 7In Season 2, Episode 7, we put human intuition to the test against machine precision. As AI tools become more embedded in secure design workflows, we ask the big question: can AI…
- Can AI Replace Pentesters? · 21 min · Season 3 Episode 6In Episode 6, Season 2, we unpack the explosive growth of AI and ask the critical question: could AI ever replace human pentesters? Subscribe to keep up to date with all new…
- Hack it or Track it: The Hunt for Cyber Vulnerabilities · 20 min · Season 3 Episode 5In Episode 5, Season 2, we dive into vulnerabilities and their detection methods, from automated scanners to human-led pen testing. Plus, we put our skills to the test in Hack it…
- Micro Pen-Testing: When Less is More in Cybersecurity · 16 min · Season 3 Episode 4In episode 4 season 2, explore the innovative world of Micro Pen-Tests - a targeted, bite-sized approach to security testing that stems from threat modelling and development…
- Breaking Down Threat Modelling in Security Testing: A New Cybersecurity Essential · 19 min · Season 3 Episode 3In episode 3 season 2, explore the power of Threat Modelling in security testing and how it helps organisations predict, identify, and mitigate cyber risks before they become…
- What Security Can Learn From Quality Control · 28 min · Season 3 Episode 2In episode 2, season 2 of Let's Talk Security Testing, we continue the conversation on the widely debated topic of 'what can security learn from quality control'. Subscribe to…
- Enhancing Pentesting Effectiveness with Jira Tickets · 13 min · Season 3 Episode 1In episode 1 of season 2, explore techniques for using Jira tickets to enhance the effectiveness of your pentesting efforts. Meaning you can threat model your change tickets and…
- Vulnerability Deep Dive: Access Control Issues · 17 min · Season 2 Episode 13In the second of the Let's Talk Security Testing vulnerability deep dive episodes, Ben and Tom explore access control issues. They explore: • What are access control issues &…
- Depth vs Coverage in Security Testing · 15 min · Season 2 Episode 12Has the cyber security industry been ... lying to us? Do scanners provide the coverage whilst penetration tests provide the depth? Ben and Tom peel back the lid on this narrative…
- Vulnerability Deep Dive: Business Logic Flaws · 24 min · Season 2 Episode 11In this first-of-its-type episode of Let's Talk Security Testing, Ben and Tom exclusively dive into the vulnerability, business logic flaws. They discuss: • How business logic…
- How to Build an Internal Security Testing Team · 18 min · Season 2 Episode 10Tom and Ben discuss: • Determining the need for an internal pentesting team • Setting up the team • Key processes that lead to success
- Where Do Vulnerabilities Come From? · 25 min · Season 2 Episode 9Ben and Tom discuss: • The 3 primary sources of vulnerability creation • A comparison of defensive cyber security approaches • Challenges of route cause analysis
- Why Context Matters In Security Testing · 17 min · Season 2 Episode 8Join Ben and Tom in discussing: • What do we mean by context in security testing? • The reality of context in security testing • Barriers to achieving context in security…
