Why undisclosed vulnerabilities is not a sales argument
Nov 15th, 2014 by Jesper Kråkhede
I was recently contacted by a company that sells vulnerability scanners and hacking tools. They promise that they had access to exploit code for vulnerabilities that are unknown. The reason why this was a sales argument was that we could show our expertise by always finding a vulnerability. I argued that this was NOT a sales argument as a serious client is not interested in us always finding a vulnerability but that we find all possible vulnerabilities and shows them how to fix the problems. If we always were to show a vulnerability that has no fix we are not proving that we are a competent partner.