Penetration testing is a useful way to check for security gaps in application development. But in the wrong hands, they can cost businesses millions of pounds. We ask – should pen testing devices be regulated in the same way as knives, medicines and firearms?