Penetration Testing

Definition

Penetration testing (see also: pentest) is an authorized, simulated cyberattack on a system, network, or application to find security vulnerabilities before malicious actors do.

Penetration testing differs from vulnerability scanning: in a pentest, the team actually attempts to exploit vulnerabilities and provide demonstrable evidence of risks. Types: black box, white box, grey box.