You are the Information Security Manager of HDA Inc. You are exploring cost-effective methods to identify vulnerabilities in new vendors. You are the Information Security Manager of HDA Inc. What is the MOST economical way to discover vulnerabilities in new vendors?