Security assessment through controlled offensive techniques: penetration testing, vulnerability assessment, exploit development, and real attack simulation. Identifies exploitable weaknesses in applications, infrastructure, and configurations before malicious actors do. Includes OWASP methodologies, PTES, red teaming, and technical reporting for prioritized remediation.