Evaluates organizational procedures, policies, and technical safeguards to identify and prioritize security risks and compliance gaps.

Actively exploits vulnerabilities in systems and networks to identify security weaknesses and assess potential attack impacts.