I'm not asking him to pentest my network, just some recommended practices :)