Vulnerability research, patch verification and offensive security notes from a Miami security firm.https://brickell-tech.comen-ushttps://brickell-tech.com/blog/does-soc-2-require-a-penetration-testhttps://brickell-tech.com/blog/does-soc-2-require-a-penetration-testThe honest answer is no, and it does not help you much, because the reason people ask is usually a customer contract rather than the framework.Mon, 31 Aug 2026 00:00:00 GMTSOC 2compliancepenetration testingElias Hasashttps://brickell-tech.com/blog/how-much-does-a-penetration-test-costhttps://brickell-tech.com/blog/how-much-does-a-penetration-test-costEvery vendor dodges this question. The reason is real, but you can still work out roughly what you should be paying, and spot a quote that is wrong.Mon, 31 Aug 2026 00:00:00 GMTpenetration testingbuying securitypricingElias Hasashttps://brickell-tech.com/blog/gzip-incomplete-patch-cve-2026-41992https://brickell-tech.com/blog/gzip-incomplete-patch-cve-2026-41992In July we reported that the official fix for CVE-2026-41992 left the bug reachable. Upstream shipped a better one the same day. Here is what that says about trusting patches.Sun, 30 Aug 2026 00:00:00 GMTvulnerability researchpatch verificationCVE-2026-41992gzipElias Hasas