7 Questions to Ask Your Penetration Testing Vendor