Security - Activity
PEN testing
(Penetration testing)
An authorised attempt to break into systems so security weaknesses can be found before attackers do
What's it for?
Finds security weaknesses by safely attempting the kinds of attacks a real attacker might try.
For example…
Before a major launch, testers try to break into the customer portal and deliver a ranked list of fixes.
A PEN test finds that an internet-facing application can be tricked into accessing another customer's records, allowing the flaw to be fixed before attackers find it
Think of it like…
Hiring a locksmith to try your doors with permission, then telling you which locks to upgrade