Foundations & Mindset
What Is Penetration Testing?
The difference between hacking, pentesting, and bug bounty — and where you fit.
A penetration test is an authorized, simulated attack on a system to find security weaknesses before a real attacker does. The keyword is authorized: you only ever test systems you own or have explicit written permission to test.
Pentester vs. attacker vs. bug bounty hunter
- A malicious attacker breaks in for profit or damage, without permission — this is a crime.
- A penetration tester is hired to break in under a contract (a 'scope'), then writes a report so the client can fix issues.
- A bug bounty hunter tests within a public program's rules and gets paid per valid vulnerability.
The value you provide
Companies don't pay you to 'hack'. They pay you to reduce risk. A great finding is one that is clearly explained, proven with evidence, rated by real-world impact, and paired with a fix. Keep that outcome in mind through every module.