A culture of security testing requires persistence, empathy, and a shared vision of reliability.