Core Security and the Future of Pen Testing