In this conversation, Sujit Christy and Chathura Abeydeera discuss offensive security and the importance of testing the strength of an organization’s security controls. They emphasize the need for offensive security assessments to understand the threat landscape and identify vulnerabilities. They also highlight the importance of offensive security in the context of business risks and the need for effective communication between cybersecurity professionals and business stakeholders. The conversation concludes with a discussion on the boundaries and scope of offensive security assessments.