“I definitely think that there's pros and cons to both approaches, and I think that ultimately most organizations end up with some hybrid model because it makes the most sense.”

Transcript evidence from Daniel Ramsbrock -- Web Application Pen Testing – Part 1.