In the 2000s, individuals who previously shared their exploits with the community started getting jobs and ceased weaponizing their tools. As a result, commercial firms like Core Impact were established as professional penetration testers couldn't risk launching unverified exploits on their clients' network due to ethical concerns.