Do managed IT providers offer penetration testing