Your son could just be training to be a penetration tester.