Actively find vulnerabilities on how attackers can gain unauthorized access to your systems or data.  The process involves identifying the scope of pentest, execute manual and automated tests, find exploitations, verify results, and create a report