Agreed. Shouldn't continuous pen testing be a thing by now?