security test that simulates a cyberattack to identify vulnerabilities in a computer system, network, or application.