Most companies run a penetration test the same way every year. A team probes the network, writes up what they find, and hands over a report. The security team sorts the issues by risk, opens a few ...