Behind the Firewall ft. Brian Lowe
by Morgan Prost / May 21st, 2026
Don’t just trust the tools.
Sometimes, the best finds come from slowing down and asking, “what’s really happening here?”
While reviewing how a web application responded to user input, KP’s Senior Penetration Tester, Brian Lowe, noticed something subtle… but it was just enough to warrant a closer look.
Instead of relying only on automated tools, he crafted a custom payload by hand.
That extra step revealed a cross-site scripting (XSS) vulnerability that scanners had missed.
It was a textbook example of why manual testing still matters. Automation can catch a lot, but it’s the human curiosity and intuition that often uncover the real risks.
Great testing isn’t just about tools; it’s about testers who know when to dig deeper.
Our pen testers are the hackers you WANT to meet.
