https://www.sorinmustaca.com/to-pentest-or-not-to-pentest-is-this-really-the-question/
To Pentest or not to Pentest: is this really the question?