Security teams spent years treating penetration testing like a scheduled event. A company hired testers, waited for the ...