Active testing is a process involving repeated interaction with a digital asset to reach success criteria defined by the test methodology.

Active tests are often human-led, using multiple tools, with each test an evolution from the prior step. Active testing can also be automated, where the testing engine sends a payload to the asset. The payload defines the success and all steps needed to complete the test. Also see "Passive Scanning".

See Also
Platform > Products
Automated Security Testing

CyCognito Automated Security Testing dynamically applies payload-based testing techniques across your entire external attack surface.

Platform > Features
Active Security Testing

CyCognito Active Security Testing enhances your defense with expert security testing services. Learn how security testing helps protect digital assets.

Use Cases
Scale your Red Teams and Pen Testers

CyCognito provides continuous reconnaissance and active security testing across your attack surface. Scale your Red Teams and Pen Testers with CyCognito.

Resources Solution Briefs
Active Testing vs. Passive Scanning to Detect Attack Surface Risk

Learn about the approaches, the challenges, the benefits, and how you can achieve continuous and comprehensive security testing across all of your external assets.

CyCognito Report

State of External Exposure Management, 2024 Edition

State of External Exposure Management Report

Critical vulnerabilities often hide in plain sight—especially in your web servers.

The report is a must-read for understanding today’s external risks and how to prioritize them effectively. Download the report to stay ahead of emerging threats and strengthen your security posture for 2025.