The State of Pentesting 2019

Here at Cobalt, we’ve done over 1400 pentests to date. The information included in this report (Top 5 Vulnerabilities, 2017 vs. 2018 Vulnerability Types, Breakdown of Security Misconfiguration Vulnerabilities) is summary data from the pentests performed in 2018.

Additionally, we provide survey data from respondents in security, management, operations, DevOps, product, and developer roles.

A few key takeaways from this report are: 

• Metrics used by top AppSec practitioners
• Top 5 Vulnerabilities from 1400+ pentests
• Breakdown of Security Misconfiguration