Penetration testing from A to Z
Scans, pentests, red teams and bug bounties: how penetration testing works, its legal framework, steps, reports, costs and France’s PASSI scheme.
Presented byNestor
11 min readUpdated on 2 October 2026What you will learn
- Tell the difference between a vulnerability scan, a penetration test, a red team and a bug bounty
- Choose the right scope and level of knowledge: black, grey or white box
- Make a test legally safe: contract, written authorisation and article 323-1 of the French Criminal Code
- Follow the stages of an engagement, from scoping to the retest
- Read a report and prioritise fixes with CVSS, EPSS and the KEV catalogue
- Know when to insist on a PASSI-qualified provider and how to choose a provider
Free chapter with your account
Chapter 1 is free to read. Chapters 2 to 21, like the Junior, Senior and Expert levels of the Cyber Quiz, are free too: all you need is a free KrakenShield account with a confirmed email address.
Checking your access…
This content is temporarily unavailable. Please try again in a moment.
