Ethical Hacking is a great consultancy offer before you sell a platform for security. If you can find and train clever hackers, and if you can retain those hackers that you’ve recruited, you’ll be in a fantastic position.

But what are some strategies for hiring hackers? Let’s think about this from a commercial perspective. What do hackers want? That’s such a broad statement, and giving an answer like, “autonomy to hack and be left alone” is cycloptic. Some people want that, but others want to make a lot of money, or do secret government stuff, or wear nice suits, or work from home, or whatever.

So I don’t want to start with giving them what they want. What I want to start with is finding them. If a good hacker exists, he or she might be making a ton of money on his/her own. Why would they want to work for me?

If they make money legitimately, I’d have to give them a compelling offer. Maybe some exciting customers. Maybe some other thing they love.

I don’t know the answer to this question, but I will explore and get back to you. If you know the answer, let me know, it would be really useful.