Why Outsourcing Vulnerability Testing Makes Sense