Is the output app checked for vulnerability assessment and penetration testing?

Is the output app checked for vulnerability assessment and penetration testing?