Penetration tests are conducted annually and case-by-case on new products/features.