It is important for penetration testers to be soft and direct when reporting physical security vulnerabilities to clients.

“you have to go in and you have to be soft. It isn't their fault. There there's that's what it is to run a company. Not everything's safe. Um, you can make it a little harder for people, but that's our job to tell them. And I just think tell them that in the most direct but soft way possible.”