Penetration testing

Authorised attempts to exploit weaknesses within an agreed scope. Reports describe the tested state; finding no flaws does not prove none exist.

Sources and review

Reviewed: 2026-10-14

• SP 800-115, Technical Guide to Information Security Testing and Assessment | CSRC

←Back to glossary