Pen tests are required in certain cyber security compliances or demanded by new clients. These tests are also recommended when implementing new systems, and as routine inspections that discover vulnerabilities.