glossary
What is penetration testing?
Clear guidance for learning that moves work forward
Use the 3-question Fit CheckPenetration testing is a security-assessment method in which authorized testers attempt to circumvent or defeat a system's security controls — under agreed constraints — to find exploitable weaknesses before real attackers do.
What it means
NIST describes penetration testing as a methodology where assessors, working under specific rules, try to bypass a system's defenses. It is authorized, scoped attack simulation used to surface and document real vulnerabilities. It is the core activity behind offensive-security roles and credentials such as penetration tester and ethical hacker.
Core source records
This table lists the page’s core content records and when they were checked. Claim-specific citations appear beside the relevant text and may not be repeated here.
| ID | Supports | Source | Checked |
|---|---|---|---|
| CIT-01 | Definition source for What is penetration testing? | National Institute of Standards and Technology — NIST CSRC Glossary | 2026-06-15 |
Ready to turn this decision into a plan?
Learnerside planner