Is this basically a free pen test, or am I misunderstanding the setup?