Vulnerability assessment and penetration testing should be critical parts of all organizations’ security operations. Peter Stephenson puts some top assessment products through their paces