As more and more businesses are moving to Rapid application development frameworks, and methodologies. We find that testing within these constructs to become more difficult due to shorter cycles, incomplete applications, limited staff and resources. How do we test within these frameworks leveraging existing people , and infrastructure to provide better coverage of attack surfaces within these cycles. With over 15 years of IT experience with various platforms and technologies, I have tested both large and small enterprise applications. Cutting my teeth as a UNIX instructor for Sun Microsystems. I then went on to make a career out of breaking things, and I have been doing it ever since. When not running security assessment’s for HP’s Fortify On Demand Service. You can find me refurbishing an old WW1/WW2 rifle, doing some photography, or heading out to the woods for some dirt time.