Upper limit of vulnerability testing