IT penetration tests, often referred to as „pen tests“, are special tests to check the security of computer networks, systems and applications. Here, experts work as „ethical hackers“ and, just like real hackers, try to penetrate a system. Unlike real hackers, they do this in order to identify weaknesses and not to cause damage.
In a pen test, various methods and tools are used to uncover security gaps. Exploiting software bugs, guessing or cracking passwords and testing security mechanisms such as firewalls are examples of this. The test may also attempt to get employees to disclose sensitive information through so-called „social engineering“ tactics.
