Penetration testing guide for buyers. Scan vs assessment vs pen test, what to use and when. Clear deliverables, fixed scope, free retest. Code and cloud reviews.