By definition, penetration testing is simulating external and internal attacks. The main goal of penetration testing is to enhance the security position of an organization.