Penetration test
A penetration test is an authorised, scoped and controlled attack simulation that finds security weaknesses in a system.
Scope
Web and mobile apps, servers, cloud, internal networks and social engineering tests on staff.
Versus a vulnerability scan
A scan lists known weaknesses automatically; a pentester chains them to show how far an attacker could really get.
Frequently asked questions
How often?
At least yearly and after major changes.