PCI DSS Requirement 11.4 calls for penetration testing at least annually and after significant changes, including segmentation testing if you rely on network segmentation to reduce your cardholder data environment scope.
We scope engagements specifically against your CDE boundary, test whether segmentation actually holds under attack, and deliver a report formatted to satisfy what your QSA will ask for during a compliance review — not a generic pentest report retrofitted after the fact.