Yes, when carried out with penned authorization defining scope, targets, timing, and rules of engagement. Dependable freelancers would require a signed deal and statement of work just before any testing begins, and can only test assets you personal or have authorization to assess. Malicious hackers are often one particular phase forward—unless