Comprehensive framework for penetration testing — web, API, and infrastructure methodology with enterprise governance.