"I know about 95 percent of [the vulnerabilities] I am going to find at a company before I even get there," said Ira Winkler, president of the Information Security Advisory Group -- a firm that specializes in penetrating business security systems to expose vulnerabilities -- and author of the book Corporate Espionage. "I can steal a billion dollars from any [corporation] within a couple of hours."
[If he is THAT sure, you don't need to hire him. You know you are vulnerable, right? This attitude also makes for a bad pen-tester. They are over-confident and frequently have blinders on to additional vulnerabilities that may be specific to your environment.
The repeated claims of being able to steal a billion dollars from any corporation is laughable.]