Penetration testing as an explicit requirement is baked into many 2026 U.S. rules, contracts, and sources of compliance, as part of broader…