Annual penetration tests vs continuous attack surface monitoring: what the scope agreement actually covers | Vulnox Blog