Skip to content

Priyanka Aash

Priyanka has 10+ years of experience in Strategy, Community Building & Inbound Marketing and through CISO Platform has earlier worked with marketing teams of IBM, VMware, F5 Networks, Barracuda Network, Checkpoint, and more. Priyanka is passionate about Entrepreneurship and Enterprise Marketing Strategy. Earlier she co-founded CISO Platform- the world’s 1st online platform for collaboration and knowledge sharing among senior information security executives.

10 Questions to Ask Your AI Pen Testing Vendor Before You Sign

10 Questions to Ask Your AI Pen Testing Vendor Before You Sign

The shortlist looks identical. The architecture is not. Every AI pen test vendor on your shortlist will tell you their false positive rate is under five percent. Their demos will look impressive. Their decks will name the same frontier models. This is the problem. Frontier model access is commoditizing. Any team can wire an Anthropic,… Read More »10 Questions to Ask Your AI Pen Testing Vendor Before You Sign

Offensive Security Guide: BAS, CTEM, CART, Pen Test, & COST Explained

BAS, CTEM, CART, Pen Test, VA, AEV, COST: What Each Actually Does, and When to Use What

Every quarter a new three-letter acronym shows up in a vendor deck. Last year it was AEV. This year Gartner introduced COST. CTEM is everywhere. BAS has been around forever and still gets confused with red teaming. Pen test means six different things depending on who you ask. If you run a security program, the… Read More »BAS, CTEM, CART, Pen Test, VA, AEV, COST: What Each Actually Does, and When to Use What

Web Application Penetration Testing in 2026: A Practical Guide for CISOs

Web Application Penetration Testing in 2026: A Practical Guide for CISOs

A CISO’s reference for evaluating modern web app pentesting programs, what AI actually changes, and how to tell platforms apart from LLM wrappers. Quick Answer Web application penetration testing in 2026 looks structurally different from the annual consulting model most enterprises still run. The shift is driven by three mismatches: applications change daily but get… Read More »Web Application Penetration Testing in 2026: A Practical Guide for CISOs

CVE-2025-0108: How Attackers Exploit Palo Alto PAN-OS: Are You Vulnerable?

In early 2025, a critical authentication bypass vulnerability, CVE-2025-0108, was discovered in Palo Alto Networks’ PAN-OS. This vulnerability allows attackers to bypass authentication and gain unauthorized access to the PAN-OS management interface by exploiting a path confusion issue between Nginx and Apache. With a high severity rating, this vulnerability poses a significant risk to organizations… Read More »CVE-2025-0108: How Attackers Exploit Palo Alto PAN-OS: Are You Vulnerable?

What’s New at FireCompass: CISO Dashboard, 799 New Vulnerabilities, 50+ Attack Trees

The cybersecurity landscape is evolving rapidly, and so is our FireCompass PTaaS platform. Our research team remains dedicated to empowering security teams with PTaaS, Continuous Automated Red Teaming( CART), Automated Pen Testing and advanced risk monitoring. Here’s a quick look at what’s new this month! CISO Dashboard: Compare Your Security Posture Our new CISO Dashboard provides customers… Read More »What’s New at FireCompass: CISO Dashboard, 799 New Vulnerabilities, 50+ Attack Trees