What's your current level of confidence in your application security program? Are you tracking any pen test metrics? Maybe you should. This session will detail several application security metrics used to measure the effectiveness of penetration testing at both program and engagement levels. The presenter will also share real world data from ~ 100 individual pen test engagements performed in 2016.