Comment by z3c0

While "useful service" may be generous wording, in my own experience, when given the option between "pentesting" and "ransom+patching", most corporations would prefer the third, cheaper option: do nothing.