I think it is a more likely path to success then hiring a pen tester and hoping he finds all your bugs!<p>Fortune 500 companies spend millions on pen testing and miss stuff. How much can you afford to spend for a startup, and what will your ROI be?<p>I have nothing against pen testing. But it should be like your 7th line of defense. Not sure most startups have the other 6 figured out....