A penetration test can properly locate a leak, and should be seen as valuable than a mere compliance tick-box measure.