What is Penetration Testing?
Definition: Penetration testing, or pen testing, is an authorised security assessment in which specialists test a system for vulnerabilities so they can be fixed.
What is tested on an iGaming platform:
- Player-facing website and mobile apps.
- Public and partner APIs.
- Back office and admin access.
- Hosting infrastructure and network.
Test types:
- Black box - testers start with no internal information.
- Grey box - testers have limited access, such as a player account.
- White box - testers have full documentation and code access.
Output: a report listing findings by severity with fix recommendations, followed by a re-test once fixes are in place. Many licences require pen tests at set intervals.
