7 questions smart CTOs ask before choosing the best penetration testing company