> Regardless of what tools you use, an internal pen test isn't the same It isn’t the same as an “official” pen test for a 10 person company with non-specialist

> Regardless of what tools you use, an internal pen test isn't the same It isn’t the same as an “official” pen test for a 10 person company with non-specialists, sure. But the document, to our knowledge, didn’t ask if they had some specific form of pen test. > because I'm like a djinni who will twist your words against you if there's the slightest ambiguity. They aren’t twisting anything. If a quick and informal pen test meets their definition then they should be more specific.