differenza vulnerability assessment penetration test