We first launched Under the Hoodie in 2017 to demystify the practice of penetration testing by surveying those in the field on what they see during client engagements—all to determine countermeasures you can take to best detect and prevent the truly sinister folks from breaching your network. We've renewed this approach in 2019 to continue providing visibility into this often occult niche of information security.

Based on the results of about 180 engagements conducted in the most recent season of penetration testing, as well as real-world anecdotes from our engineers and investigators, our research explores recent trends and patterns derived from penetration testing. Here you'll find the report, blog posts, webcasts, and videos from our very own Rapid7 pen testers. Enjoy the dark side.