Yes, penetration testing services may break the software application in some way for unauthorized access or data leakage that leads to specific damages. Thus, it’s advisable to perform penetration testing in an internal, dedicated, and isolated environment to stay away from harm or side effects. One must not forget about application and data backup before commencing the testing process.