
Security testing should run like your test suite
Cipher tests the way an attacker would, and it never stops. Application, cloud and network.
A source that found nothing is a measurement. A source that has not run is a gap. Neither means the launch lacks the thing.