Nearly every business had a straightforward obligation to pentest their network, internal and external, with potentially an application if they had one.