How Long Will It Last?

Is it possible that penetration testing can soon be a thing of the past?

Who are we kidding?

Pentesting has taken an alarming turn in the past few years. We have seen a myriad of new tools, techniques, and other factors that have been invented to thwart different types of attacks (which includes those deployed by white and grey hat testers). Some of these tools include:

• The invention of IA monitoring solutions

• (RASP) Runtime Application Self-Protection

• Secure coding practices

• NexGen Firewalls

• Zero Trust

• MFA

• etc....

Why Does This Matter?

I bet that, by now, you must be thinking "why does he have such a negative outlook on the future of penetration testing". I am speaking truth (which is something that needs to be heard more these days). As pentesters, it's our job to be ahead of the curve, in terms of technology. It should also go without saying that we should also examine that curve for continuity reasons. You should (as a working professional) be able to identify if something is a threat to your own existence.

So What's The Solution?

The solution is simple. Always have a backup plan and never stop learning. You're never too smart to be replaced by technology. Here are also a few other pointers to guide you on your way, in the future:

• Always invest in yourself, no matter what. Don't wait for companies to do it for you.

• Never get comfortable. If a job is too easy, you are bound to get rusty and/or get bored.

• Have a clear path and goal in mind, at all times. It's easy to lose yourself in a job and never grow. The saying goes "closed mouths don't get fed". If you want to be a manager some day, let it be known. If you want a raise, let it be known...

• Have as many skillsets as possible. You can literally never have enough these days. I'm even seeing more jobs that want a person to do both offense, defense, and management at the same time...