questionable pentesting firms use it on their reports for critical info