A breakdown of why CAI and XBOW represent two fundamentally different security models, and why building in-house security capability scales better than buying one-off assessments