A qualitative study of penetration testers and what they can tell us about information security in organisations. - Stefano De Paoli 001; Jason Johnstone (Inf. Technol. People, 2025)