Penetration Scope

Noun · Security & Infosec

Definitions

  1. The defined boundaries of what a penetration test may target, how far testers may go, and which techniques, systems, or data are included or excluded. Clear penetration scope prevents misunderstandings, unsafe testing, and incomplete assessments that miss critical assets.

    In plain English: The agreed boundaries of what a penetration test is allowed to cover.

    Example: "The web app looked clean, but the penetration scope had excluded the API gateway and cloud identity layer that actually mattered most."

Related Terms