thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Penetration Testing Execution Standard (PTES)

A penetration testing methodology defining seven phases from pre-engagement interactions to reporting.

Definition

PTES defines seven sections: pre-engagement interactions, intelligence gathering, threat modeling, vulnerability analysis, exploitation, post-exploitation and reporting. It also includes technical guidelines describing tools and techniques for each phase. It is widely cited as a baseline methodology for professional testing.

Example

A firm structures its pen test report sections to match the seven PTES phases.

Exam tip

Know that PTES includes threat modeling as an explicit phase between intelligence gathering and vulnerability analysis.

Related terms