We picked apart the 117 technical assurance projects (code reviews, VAs, pen tests, config reviews etc.) that we did across the last 12 months. This talk will present some of the findings from this analysis and give some insight into the workings of an Australian security consultancy.