County pays $600,000 to pentesters it arrested for assessing courthouse security
Summary
Two pentesters authorized to perform red-team security testing on a Iowa courthouse were arrested in 2019. They were later awarded a $600,000 settlement after alleging wrongful arrest and defamation, highlighting the chilling effect and miscommunication risks in authorized security testing. The case underscores the need for clear authorization, communications with law enforcement, and robust legal protections for pentesters and their clients.