Penetration Testing

A penetration test, colloquially known as a pentest, is an authorized simulated cyber-attack on a computer system, performed to evaluate the security of the system. The test is performed to identify weaknesses, including the potential for unauthorized parties to gain access to the system’s features and data, as well as strengths, enabling a full risk assessment to be completed.

The process typically identifies the target systems and a particular goal, then reviews available information and undertakes various means to attain that goal. A penetration test can help determine whether a system is vulnerable to attack if the defenses were sufficient, and which defenses the test defeated. Penetration test reports may also assess potential impacts on the organization and suggest countermeasures to reduce risk.