Built by a Developer, Tested by a Hacker