Results for CREST-accredited grey-box penetration testing for SOC 2