edit: Well, I would say in concert with your own internal penetration test, not replace
https://www.hatforce.com/