Do you run penetration tests on my application?

No. We secure and maintain the system layer; auditing your application code and dependencies is not part of the offer. Which means the vulnerability classes most often behind real breaches — broken access control, IDORs, injections — remain yours to handle. We would rather say so plainly than let you assume coverage you do not have.