Category penetration testing