Back in the day (2009), I did a lot of of penetration testing as a security consultant. This song sorta reflects (a rather immature and not very nuanced) view of the friction between security, business, and software developers. But it's kinda funny.

Lyrics

It's five o'clock on a Saturday The developers are trying again The release manager waits in his cubicle for the build scripts and smoke tests to run

He says how will we do this by Monday? The security tests haven't begun It's buggy and brittle and does just a little of what the sales guy downtown says it can

NIST 800-53, FIPS 140-2, PCI....

Chorus: Break our new app white hat hacker man Break our new app tonight Cause we're all scared to death of the auditor But you'll make us feel alright.

Now Bob down the hall is a friend of mine He uses tools right off the shelf He can do just a scan or maybe try something canned, but he's better than doing it yourself.

He says "why do we need these consultants? I can do all this stuff just the same." He doesn't realize, when the hackers come, Who the management's going to blame.

C I S S P, M S C E, SANS GIAC

Break our new app white hat hacker man Break our new app tonight Cause we're all scared to death of the auditor But you'll make us feel alright.

Now Dave's the development manager And security's a pain in his ass Cause he knows first and foremost Features get him his bonus So security always comes last

A S T Q B, SAS 70, I S O

Break our new app white hat hacker man Break our new app tonight Cause we're all scared to death of the auditor But you'll make us feel alright.

Well it's been a long day in security The dev manager gives a sad smile He knows this release Despite all their pleas Will miss their deadline by a mile

And metasploit overflows buffers And the shell code runs on servers galore And they burned another sprint Instead of building security in So assessments will go on some more

C C N E, O W A S P, PMP

Break our new app white hat hacker man Break our new app tonight Cause we're all scared to death of the auditor But you'll make us feel alright.