The practice of deliberately probing systems and networks for security vulnerabilities with the owner's permission, helping organizations identify and fix weaknesses before malicious hackers exploit them.