Security assessment and pentesting