Penetration testing, or pen testing, is a controlled and authorized security assessment in which testers try to exploit weaknesses in an application, network or organization to show what a real attacker could achieve.
Why it matters
A scanner lists possible flaws, while a pen test confirms which ones can be chained into real impact and how far access extends. Findings are delivered as a report with severity and fix guidance. Testing must be done only with written permission and a defined scope, since the same techniques without authorization are illegal.
Example
A company hires a firm to test its customer portal. The testers find an access control flaw that lets one customer view another's invoices, document the steps and recommend server-side authorization checks.
Common mistakes
- Testing systems without written authorization.
- Treating a one-off annual test as continuous assurance.
- Fixing only the listed findings without addressing the root cause behind them.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.