Grading on a curve: How to assess a pentest Red Canary By: Brian Donohue 28 May 2026 at 15:13 Defenders donβt need to detect every adversary action to prevent a threat. Hereβs a more realistic, optimized approach to testing.