---
title: Penetration Test Workspace
description: The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen\_test\_workspace\_avr.html
release: brazil
product: Application Vulnerability Response
classification: application-vulnerability-response
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Penetration Test Workspace

The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team.

## Roles required

Penetration testing requires the following roles:

**sn\_vul.app\_pen\_tester:** Represents a pen tester who is responsible to create pen test findings as part of the application penetration testing.

**sn\_vul.app\_pen\_test\_requester:** select record for action: sn\_vul.app\_pen\_test\_requester.

## Lifecycle of Penetration Testing

As an application owner, you can request the ethical hacking team for a penetration test assessment of your application. The ethical hacking team acts on this request and creates penetration test findings. These findings are manually created Application Vulnerable Items \(AVIs\).

The penetration testing workflow covers the penetration testing life cycle from raising the testing request to resolving the findings of the ethical hacking team.

Navigate to **Workspaces** > **Penetration Test Workspace** to view the dashboard and the Penetration Test Assessment Requests list.