Penetration testing is a sanctioned act of digital warfare, a highly engineered onslaught aiming to expose the soft tissue of a system before something real comes along to rip it open.