Penetration testing and data analysis