Making the Case for Offensive Security