Penetration Testing For "SaaS Only" Company

We are a cloud only company. We rely on SaaS services for everything, all secured via Okta using SAML and MFA. We have one physical site for a small subset of our users, everyone else is fully remote. Beyond a couple of network printers, AV equipment, door entry system there isn't much on site. We don't manage any webservers or anything like that. We basically rely on Office 365 and Salesforce.

It's been suggested that we have a penetration test …

beyond cloud cybersecurity door entry equipment isn mfa network okta penetration penetration testing physical printers saas saml services system testing