A group of security professionals authorized to simulate real-world attacks against an organization's defenses to identify vulnerabilities and test incident response capabilities.