A penetration test is a simulation of a possible cyberattack against an IT system performed by a professional with no malicious intent. The main purpose of such tests is to find exploitable vulnerabilities before anybody else does so that they can be patched and addressed accordingly. A cyberattack can damage a company in many ways, not just economically. Not all companies should engage in a pen test, since they arent always particularly beneficial. Pen tests can be expensive, so an organization with a smaller budget might be less able to conduct them.”]
Source: https://securityintelligence.com/why-when-and-how-often-should-you-pen-test/