The best, most successful software pentesting teams barely market at all. NCC is one of the largest in the US, and nobody is finding them through Google ads, or, really, ads anywhere.
The same is true off firms like Bishop Fox, Leviathan, and IOActive.
Which is to say, at least in the app pentesting market, I'm a little skeptical of the premise.
Which is to say, at least in the app pentesting market, I'm a little skeptical of the premise.