Have been pen-testing and doing security research for 13 years .