An authorized, simulated cyberattack against a system to evaluate its security by actually exploiting vulnerabilities.
Unlike a vulnerability scan, which just identifies potential weaknesses, penetration testing goes further — actively attempting to exploit them to prove real-world impact, always within a legally agreed scope.
