← Security+ glossary

White, gray, black box pentest types

In a white box test the tester has full knowledge of the system, in a black box test they have no information and impersonate an outside attacker, and gray box is the middle ground with partial knowledge. More knowledge gives a deeper and faster analysis, while less knowledge more realistically imitates an attack from the outside.

All Security+ guides →