“But I insisted they had a penetration test done on the software.”

Transcript evidence from Simon Bennetts — OWASP ZAP: past, present, and future.