I like that they test for all kinds vulnerabilities from remote access to data exfiltration right through up until endpoint compromise with lateral movement into internal networks as well! They are very thorough but also do not take themselves too seriously which makes them easy going when working together towards finding solutions or just having fun while doing it!! The fact you can get so many different types tested by one person (or small group) really helps reduce costs associated wtih hiring multiple people who only specialize within certain areas such an appsec etc..