Paid $120 for a 'security audit' that just ran a free scanner
Last month I got an email from a company promising a full network audit for my home office, so I paid $120 upfront. They sent back a 4 page PDF that literally showed the same results as the free version of OpenVAS I already ran myself. Has anyone else had a service pull this kind of lazy scan-and-report trick, and how do you spot the legit pentest folks from the script kiddies?