Before we can even discuss the real costs of an application pentest, we need to level set what penetration testing is about and how apps and APIs differ in many ways from traditional network-based pentests that