Our pentesters find vulnerabilities of all types, but they most commonly report vulnerabilities in your business logic and vulnerabilities that fall into the OWASP Top 10 categories. In 2022, we found 6 vulnerabilities on average in a 2-week pentest.