DDoS testing is invariably performed around twice a year. As static tests, it is done on dynamic environments that are constantly changing due to website upgrades, new applications, etc. hence their conclusions are not timely and do not hold good for extended periods of time (generally less than 1-2 months). Learn more about benefits and limitations of DDoS testing - https://mazebolt.com/traditional-ddos-penetration-testing/
