2024 Penetration Testing Report

Offensive cybersecurity practices like pen testing stand apart from other security methods. By learning how other organizations are utilizing penetration testing, we gain valuable perspectives on the efficacy of different approaches, challenges encountered, and lessons learned. Read the report to understand the current state of pen testing practices, providing ongoing, useful data on the following key issues related to pen testing.

Each year, Core Security conducts a global survey of cybersecurity professionals across various industries on their penetration testing practices to better understand the different approaches to, common challenges with, and overall development of offensive security.

The 2024 Penetration Testing Report is an analysis of the results of this survey, with the aim of providing increased visibility into the current state of offensive security. It also demonstrates the value of collaboration and knowledge exchange, as this collection of shared experiences enables members of the cybersecurity community to better identify best practices, avoid common mistakes, and refine their tactics.

With 72% of respondents reporting that penetration testing has prevented a breach at their organization, the value of penetration testing is well established

Though continuing financial challenges remain an obstacle, 83% of respondents still prioritize running at least one-two pen tests a year in order to prioritize risks, close security gaps, and stay compliant with important security regulations.

• Reasons for pen testing

• The impact of compliance initiatives

• Usage of in-house teams and third-party services

• Frequency of pen testing

• Evaluation criteria for pen testing tools

• Relationship to red teaming

• Commonly tested infrastructures and environments