more test, penetration validations