Penetration testing is the practice of ethically attacking systems to find vulnerabilities before attackers do. It simulates real-world cyber attacks.