Penetration testing should ideally be conducted by certified professionals who have experience in cybersecurity and understand the intricacies of email marketing platforms. Organizations can either employ in-house security experts or hire third-party services to perform the testing. Third-party testers provide an unbiased assessment and often bring a fresh perspective to identifying vulnerabilities.