Comment by bioweek

So dumb question. How do you make money doing that? Is it that software companies want their security tested so they hire you? (I wouldn't think most companies would be so proactive.)