A simulated cyber attack against a computer system (a target) to identify exploitable vulnerabilities. It’s a proactive approach used to prevent unauthorized access to the system by detecting potential security vulnerabilities and fixing them.