Why the retest is the part you should not skip
A finding list without a retest is homework you never marked. Insurers and customers notice.
ITSIGN Administrator · February 19, 2025 · 2 min read
The value of a test is the holes that close. If you do not retest, you have a story and an open ticket.
Book the retest when you book the test. Put the date in the same quarter as the last due date on the high findings.
That loop is built into how we run penetration testing.
Related reading
When a pentest is really for the insurance form
Be honest about the audience. Then still do the work so the form is not the only thing you get.
2 min read
Scoping a pentest without wasting money
Narrow the crown jewels. Write rules of engagement. Budget the retest. Everything else is theatre.
2 min read
Pentest vs vulnerability scan: stop mixing them up
Scans are continuous. Pentests are point-in-time and manual. You need both, and they answer different questions.
2 min read
Want this applied to your environment?
A short conversation, an honest assessment of your current setup, and a clear proposal. No obligation and no pressure.