> The way it is described is 100% legit pen testing with public data and endpoints and no malicious use of vulnerabilities found. "legit pen testing" requires

> The way it is described is 100% legit pen testing with public data and endpoints and no malicious use of vulnerabilities found. "legit pen testing" requires consent from the owners of the system being tested.