What is Penetration Testing?

Definition: Penetration testing, or pen testing, is an authorised security assessment in which specialists test a system for vulnerabilities so they can be fixed.

What is tested on an iGaming platform:

  • Player-facing website and mobile apps.
  • Public and partner APIs.
  • Back office and admin access.
  • Hosting infrastructure and network.

Test types:

  • Black box - testers start with no internal information.
  • Grey box - testers have limited access, such as a player account.
  • White box - testers have full documentation and code access.

Output: a report listing findings by severity with fix recommendations, followed by a re-test once fixes are in place. Many licences require pen tests at set intervals.

Back to Glossary