Penetration test
A penetration test (also called a pentest or PT) is a planned and controlled attack on a computer system carried out by a tester (a hacker or penetration tester) to find security weaknesses, assess the potential access they could provide, and evaluate the value of that access and the information stored by the system.
On this page
Source content checked . English translation published 2026-10-27.
In business automation
A penetration test is a planned attack on a system to find weaknesses before a real attacker does. For automation, it should cover forms, webhooks, and API keys, not just the login page.
Examples
These examples illustrate a possible workflow. Adapt the connections and rules to your own systems.
Testing a lead intake workflow
A tester is authorized to try the website form, webhook, and test key. They try unusual input and duplicate requests. Findings are added to a remediation list before the form is opened to the public.
Relevant tools
- Supabase
- The assessment should cover row-level permissions, service keys, and edge functions, not just the login screen.
What to check
- Testing without a written scope and authorization can be considered an attack rather than security work.