One of my customers hired a firm to teach me how to break into our own site - showed us how to use tools - I bought two books they recommended.

Interesting.

This same customer hired a security firm a few years ago that actually "hid" in the building until after hours and then dug around the administrators offices finding passwords stashed in desk draws.