[dfc]

You are your brand. If your homepage gets turned into a billboard for goat.cx you are owned in more ways than one...

There is really no point in us discussing this further. We have dramatically different assumptions on the importance of security and the value of a company's image/reputation.

[boyter]

I didn't say it wasn't a priority, or that you should leave yourself open to being totally owned, just that executing a pen test against your new website is probably overkill in some situations.