And before we start with the today topic, because you're now running your company and when you hire a candidate for offset positions or pen testing positions in the era of 26, okay how do you shortlist the cvs and the reason of i asking this question i know it guys this is not part of our discussion but as he started with amazing parameters about acquisitions hiring and all that i thought it's the right person who can give me the answer because this will give a lot of clarity to the to you guys you know who are looking for a job So today as a hiring manager or as an owner of the company, as a founder of the company, does certification matter? If not, then what? If matter, why? And what are the other parameters you consider when you shortlist a CV, which can be useful for the people because according to they can prepare the CV also because they see from the lens of candidate, but you see from the lens of a company.

so for us as second year uh till now we have not hired anyone just because of the cv right we have all this i'm talking just about the vapt team i mean we have so many teams but i'm specifically talking about the vapt team where all the pentest just comes and joins us so in the pen testing field till now 95 of our hiring was based on reference from people we know right and remaining five percent would be like we actually shortlisted candidates on linkedin we reached out to them that you know we feel you are the right fit for the company because what i feel in this era 2026 if you are really a good penitentiary with your skills you don't need to go and find a job people will come come to you for hiring me and if if it is not happening then you're doing something wrong totally and uh when when the initial shortlisting happens we see that you know how the person is uh you know in terms of nature in terms of responding in terms of their communication skills and especially in terms of curiosity like how curious this person is because you might not know everything at this point of time but how willing how willing you are to invest your time to find out something that that not that might not benefit you at this point in time maybe at a later stage right so so that's that's what i see and i strictly avoid people who you know who focus more on more on the uh financial aspects of growth because what i feel if you're talented if you are skilled money is a byproduct it will eventually come to you but if you're just focused on you might be distracted like we have so many people here in our company who never talk talks about money i'm not saying that is the good thing to do you should still focus on money because all of us are working to make some money right but they are more focused on their skill and as a company we will feel bad that if we don't implement their salaries if we don't share bonuses from the profit that we make because we don't want our competitors to coach them we don't want them to leave us we we want the you know We want a long-term journey with them.

And even we are now planning to distribute some shares to some of the really solid poor people in our

And like when we say in offsec, OACP and all that, we heard about a lot of things on lateral movement, Python and all that, right? Now, similar like what are the topics we should know when you're preparing for this exam? They should know.

Okay.

So one should know like what are the common tradecraft all most of the times we only see a chat where we are talking all right but there are various different systems you know systems in place that are making this ai function there is a various you know there are there are databases like vector database where you know data is stored so that the lln can go and read and you know get you the data that is needed okay there is something that's rag pipeline right pipeline is nothing but Basically, if the AI doesn't know if the LLM model is not trained on something, they can probably go back to the AI pipeline where you have probably given your PDFs, maybe internal company documents, which they can read and come back with the response.

And there could be tool calling capabilities that you have given to the AI system, maybe they can traditional tradecraft that we all know about network web uh all of these things and if you know that most of the AI development happens on python and there are various different python components that the developers use various different libraries so there are a lot of different attack vectors around those libraries and you know how how the development happens which needs hardening so so I I personally feel the most important thing for uh getting the certification is threat modeling and not just for the certification overall for any AI related or any contestant related task I feel that modeling is most important because this exam basically allows using AI right you can you can you can use chat GPT cloud or any other AI for in your way through this exam