Thank you, yes, We are hired by a company ( and after all the legal documentation ) play the part of a hacker, attack the application or infrastructure and then produce a report on what we found and the necessary steps to fixing it.