Identification of weak points that are particularly vulnerable to threats. Testing of web, mobile, and desktop applications is conducted from the perspective of a potential attacker, using Black Box and Grey Box methods. Black Box testing refers to tests conducted without knowledge of the system, while Grey Box testing involves partial knowledge of the system, allowing access to accounts and documentation.

The testing process complies with OWASP organization guidelines, considering the OWASP Top 10 list of most common threats and CWE/SANS Top 25 Weaknesses. Elements of the PTES and OSSTMM methodologies are also utilized during testing.