Tests intended to detect flaws in the security mechanisms of an information system to ensure it protects data and maintains functionality as intended