Proactive testing to identify and exploit vulnerabilities, which identifies weaknesses before attackers do, compliance testing