VoIP PBXs, SIP endpoints, and call records are attractive for fraud, eavesdropping, and PBX hijacking. Default passwords, open SIP ports, and weak TLS produce bill shock or privacy incidents. VoIP security testing exercises the voice infrastructure you publish in an agreed scope; it does not promise to scan every carrier network or the whole internet. A new PBX, a remote contact center, or a SIP trunk change puts this work on the agenda. To avoid dropping live calls, a maintenance window and forbidden numbers are required.
TARGON does not reduce VoIP pentest to a generic port-scan pack. How voice and data are separated, and which admin interfaces face the internet, are agreed with you. Pentest delivery still applies: written authorization, evidence, risk, and remediation. Your vendor's official support does not replace TARGON; coordination is discussed if it is in scope. Taking VoIP security testing from TARGON applies corporate pentest discipline to a niche surface.