Penetration testing includes simulating cyberattacks on a system to uncover weaknesses, such as testing a company's network defences by attempting to breach them through phishing attacks or exploiting software flaws.