pen test findings