Fair point - but I&#x27;m thinking that a company like Juniper, which has critical branding and revenue on the lines, can afford to hire the 100 top-of-the-line pen testers for 90 days to scrub through their code (with various members have different areas of speciality - which would be important in a situation like ScreenOS which has so much breadth).  Figure a top-end pen tester goes for around $300-$400K&#x2F;year + 50% consulting Markup - $600K&#x2F;year works out to $150K&#x2F;90 days * 100 pen testers = $15mm.<p>The level of performance out of a $400k&#x2F;year pen tester is pretty good.  100 of them can really scrub a code base pretty well.<p>$15mm might sounds like a lot of money to you and I - but you would be amazed to see how quickly the money flows when there is a security issue at stake.  Also - since the Target CEO (<a href="http:&#x2F;&#x2F;www.cbc.ca&#x2F;news&#x2F;business&#x2F;tony-fisher-fired-as-target-canada-president-1.2647934" rel="nofollow">http:&#x2F;&#x2F;www.cbc.ca&#x2F;news&#x2F;business&#x2F;tony-fisher-fired-as-target-...</a>) got axed as a result of a security event, budgeting for security responses has strong CxO level support.<p>In addition to the consulting workforce you can pull in for this type of project, you also presumably have a highly motivated internal workforce that will be pulling long hours, and working hard to support the pen testers as well.