eh how are they going to make the usual small practice do "penetration testing"?