In some situations, maybe. In this case, given the director swore at OP, I strongly suspect foul play.

Were we talking some light fudging, the director would have spent time explaining what the customer is asking for and worked with them to determine whether what they do supports a statement of “we do security testing.”

And if they can’t support the claim? Well, the director’s response will tell you if they’re an honest broker or not.