Private Asset Vulnerability Assessments and PenTesting