Penetration Testing Overview for QA

Summary

A conceptual understanding of what dedicated penetration testing involves — QA doesn't typically perform full pentests, but benefits from understanding how a specialized security team's work complements standard QA.

• 1Read a conceptual overview of penetration testing methodology.
• 2Learn where QA testing and penetration testing overlap and where they diverge in scope.
• 3Understand when a QA team should escalate a suspected security issue to a dedicated security team.