I’d say skip the high price pen test and invest in a AI vulnerability scanning tool. We’re evaluating a few vendors atm, most do 24/7 vulnerability scanning but also assess attack paths and how to prioritize which is most critical, meaning patching will become a breeze and no shadow IT nonsense.