Internal penetration testing checks your network defenses if a malicious insider is already in, while external penetration testing sees how easy it is for an outsider to break in. They are both like security detectors, one from inside your system walls, the other from the outside!