Most penetration testing projects go live in about 5 days. Week one is scoping, then two-week build cycles you can see and click. No open-ended discovery that bills by the month.