Penetration testing, also called pen testing, describes processes, tools, and services designed and implemented to simulate attacks and data breaches and find security vulnerabilities. You can run a pentest on a computer system, an entire network, or a web application.