Revealing penetration-testing tool sealed staffers' fate