> Honestly none of that is a pen test under almost anybodys understanding of the word Testing security groups, verifying auth(z/n), and testing APIs is like 90

> Honestly none of that is a pen test under almost anybodys understanding of the word Testing security groups, verifying auth(z/n), and testing APIs is like 90% of a penetration test.