ES&S wants to pen test its way to better security. But that may not be the best way to go about it. Greg and Jen discuss.