Breach and attack simulation (BAS) is a technology that automatically and continuously runs real attack techniques, without harming systems, to check whether security controls block or detect them. Unlike a point-in-time penetration test, it repeats tests frequently and shows which controls need tuning, such as an endpoint agent that misses credential theft or a firewall rule that allows data exfiltration.
Go deeper on the TecnetBlog: Pentesting as a Service (PTaaS)
BAS, attack simulation, continuous security validation, security control validation, automated attack simulation