What is Web penetration testing? Definition and explanations
A web penetration test is an authorised assessment that actively tries to exploit a site or application's flaws: authentication bypass, access to another account's data, injection, privilege escalation. Unlike an automated scan, it chains weaknesses together to demonstrate real impact. It produces reproducible evidence and a prioritised remediation plan.
In one sentence
A web penetration test genuinely exploits an application's flaws to demonstrate their impact.