home/glossary/Penetration testing

Penetration testing

nounverified·updated May 9, 2026

Security testing in which evaluators mimic real-world attacks in an attempt to identify ways to circumvent the security features of an application, system, or network. Penetration testing often involves issuing real attacks on real systems and data, using the same tools and techniques used by actual attackers. Most penetration tests involve looking for combinations of vulnerabilities on a single system or multiple systems that can be used to gain more access than could be achieved through a single vulnerability.

polysemousMWENISTIR 7298: Glossary of Key Information Security Terms, Revision 2

Senses

SANS Glossary of Security Terms

Penetration testing is used to test the external perimeter security of a network or facility.

National Initiative for Cybersecurity Careers and Studies (NICCS) Cybersecurity Lexicon

An evaluation methodology whereby assessors search for vulnerabilities and attempt to circumvent the security features of a network and/or information system.

ISACA Cybersecurity Glossary

A live test of the effectiveness of security defenses through mimicking the actions of real-life attackers

NY DFS Part 500 (NYCRR Title 23, Chapter 1, Part 500)

The purpose of this task is to determine the effectiveness of security defenses by mimicking the actions of real-life attackers.

NISTIR 7298: Glossary of Key Information Security Terms, Revision 2

A test methodology in which assessors, using all available documentation (e.g., system design, source code, manuals) and working under specific constraints, attempt to circumvent the security features of an information system.

NISTIR 7298: Glossary of Key Information Security Terms, Revision 2sense 2 pending review

A test methodology in which assessors, typically working under specific constraints, attempt to circumvent or defeat the security features of an information system.

Classifications

Entity Type

Process92%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Sensitivity

Regulated78%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Information Class

85%llm-generatedllm:claude-haiku-4-5
?unassignedlast reviewed

Variants

plural
Penetration testings
possessive
Penetration testing's
pluralpossessive
Penetration testings'