Not likely, remember security is a process not a product. That is why things like SOC and iso 27000/27001 exist to show as a company you have processes in place to protect their own data and customer date
company survived a 5-day pentest
While I like the thought, I would think threat actors would take that as a challenge.