Vendors providing penetration testing as well as managed SOC monitoring services have up to six months until October to