A practice in cybersecurity where a group attempts to breach a system's defenses to test its security measures.