---
title: Penetration testing workspace
description: Penetration testing workspace in Application Vulnerability Response helps customers request for penetration test assessment request and track it using the workflow. It enables application owners to assess the security posture of their application. It is the manual testing of an application by the ethical hacking team.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/application-vulnerability-response/pen\_test\_workspace\_avr.html
release: australia
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Penetration testing workspace

Penetration testing workspace in Application Vulnerability Response helps customers request for penetration test assessment request and track it using the workflow. It enables application owners to assess the security posture of their application. It is the manual testing of an application by the ethical hacking team.

## Roles required

Penetration testing requires the following roles:

**sn\_vul.app\_pen\_tester:** Represents a pen tester who is responsible to create pen test findings as part of the application penetration testing.

**sn\_vul.app\_pen\_test\_requester:** select record for action: sn\_vul.app\_pen\_test\_requester.

## Lifecycle of Penetration Testing

As an application owner, you can request the ethical hacking team for a penetration test assessment of your application. The ethical hacking team acts on this request and creates penetration test findings. These findings are manually created Application Vulnerable Items \(AVIs\).

The penetration testing workflow covers the penetration testing life cycle from raising the testing request to resolving the findings of the ethical hacking team.