Last year one of our websites went through a pentest, this was a real eye opener for us and we want to share this knowlegde. What gets tested, what is easily fixed and where lay the more difficult issues? We want to share this experience with you. What changed in our standard practices and what did we struggle with.

We will go into the case, who is the client and why did they want to do a pentest?
We discus the points of attention that came out of the pentest and how we solved them.