Yes, penetration testing can go remotely via a VPN connection. Yet, many assessment exercises such as wireless pen tests or internal network pen tests might require onsite assessments.