In Website Penetration Testing , It's actually a war between Who knows best about the services and practices the other person has implemented.