Penetration testing (pen testing) involves authorized attempts to breach systems, applications, or networks to identify security weaknesses before malicious actors can exploit them. Ethical hackers use the same tools and techniques as real attackers, but report vulnerabilities instead of exploiting them—helping organizations strengthen their defenses.