Explorations in manipulation: Scams in security testing
I’d add that it’s impossible to do good security testing at scale without using automated security testing tools and services and understanding the value they can bring.
Second verse, same as the first.