legal penetration testing