01
A scanner is not a pentest, even if the report says so
02
The questions that separate a serious provider from one that just runs a scanner
03
How an automated scan gets disguised as a manual pentest
04
What the report should include if the work was real
05