
The Security Risk Advisors co-founder has spent years asking whether defenses work. His other enduring question is who gets the chance to build them.
The Philadelphia firm puts attackers and defenders in the same room, gives away software, and asks a wonderfully awkward question: did your defenses actually work?