UK companies are increasingly adopting web application penetration testing to safeguarding their valuable resources due to evolving cyber threats. But how does one go about selecting the appropriate vendor for such an important task?