Authorized security assessment activities, penetration testing, vulnerability assessment, red teaming, code review, and controlled attack simulation on infrastructure, web applications, mobile, APIs, and cloud environments. Uses structured methodologies like the OWASP Testing Guide, PTES, and OSSTMM to identify exploitable vulnerabilities and guide remediation.