An evaluation activity whereby assessors search for vulnerabilities in a system and seek to penetrate it.