Penetration Testing
Penetration testing is an authorized simulated cyberattack performed against an organization's systems to evaluate the security posture by identifying exploitable vulnerabilities before real attackers do.
When comparing providers
Ask whether penetration testing is included in the SOC contract, offered as an optional service or purchased separately. Agree who fixes the findings and whether the engagement includes a retest after remediation.