In agile times, everyone thinks that application security can be achieved with testing tools; moreover, it is easier to buy tools and penetration testing services than to train digital experts to secure applications from the design stage.

Throw some real examples into big companies, we can discover the lie behind this reality, and change our thinking to start doing our job well as security professionals