Matt Hamilton of Netsight talks about how they test a web site security policy for one of their clients.