It is the process of checking exploitable vulnerabilities on the target. In web security, it is used to augment the web application firewall.