We will be talking about perception or reality applied to Information Security in the context of non-existent vulnerabilities. When our favorite, industry grade, expensive, automated scanner tells us: “there is no spoon”! Are we ok? Should we care? What could be done to adjust our “perception”?