Many security leaders assume their penetration testing vendors practice the same robust security they preach. But what if the tools and infrastructure your vendor uses are outdated and insecure? Learn the critical questions to ask before your next engagement.