Kevin Johnson on penetration testing methodology
From BSidesGVL 2020 - Kevin Johnson - "Removing the Cobwebs: Upgrading Our Web App Testing" · · BSides Greenville
“As a security industry we really focus on the cool hacks right we focus on me the exploitation oh my gosh I stole three million credit card numbers I dumped the database and got a million people's Social Security number with permission right um that's what we focus on but the reality is when we look at a penetration test when we look at the methodology that we follow exploitation which is the fourth step which it's a cycle so it's also the eighth step the twelfth step the sixteenth step we can do this math forever it's actually the smallest part of the test it is the least amount of time that we spend in the window that we're testing.”
On , Kevin Johnson, Board member at Independent Board Member, spoke about penetration testing methodology during BSidesGVL 2020 - Kevin Johnson - "Removing the Cobwebs: Upgrading Our Web App Testing" on BSides Greenville.
About Kevin Johnson
Kevin Johnson, co-founder and chief operating officer of Bud Ecosystem, appeared at Dell Technologies World 2026 to discuss the company's approach to enterprise AI. Johnson stated that many enterprises are "skimming" with third-party AI tools, but argued that "deep AI that's valuable in the enterprise" requires re-architecting workloads and workflows for better efficiency and cost-effectiveness. He said Bud Ecosystem is building a "more elegant solution" that can help enterprises focus on AI strategy rather than building "stove-pipes of infrastructure," and claimed the company can reduce costs "up to 80%" with governance in a single plane. In a separate appearance on the podcast "Insurance, You Indemnify Me," Johnson discussed his background as an independent insurance agency owner. He said he is an Aurora, Colorado native, holds a marketing degree from Metropolitan State University of Denver, and began his agency in January 2022, writing over a million dollars in premium in his first year. Johnson noted that he left the carrier side of the business because of changes to compensation structures, and described his current work as "way more intense" than his previous career.