Testing of network infrastructure to identify exploitable vulnerabilities in firewalls, routers, switches, and services from external or internal viewpoints.

Manual and automated testing of web applications and APIs to identify security vulnerabilities, including those listed in the OWASP testing guide.