Paul Johnston has worked as a web app pen tester for many years. He has done a lot of work improving pen testing processes - client engagement, methodologies, tooling, reporting, and more. He also has a long-standing interest in software development, especially web application frameworks, and how we can design frameworks to minimize vulnerabilities in application code. He now works at PortSwigger coordinating the support, research and development teams.