You can always vouch for "white hat testing"