But what would be the point of pentesting if there were no hackers?