A financial services company wants to hire a security firm to test its external-facing web applications. Management wants the engagement to simulate a real external attacker who has no prior information about the systems, network topology, or credentials. The testers must perform their own reconnaissance to discover targets. Which type of penetration test should the company request?