Penetration Test Workspace
The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team.
Roles required
Penetration testing requires the following roles:
sn_vul.app_pen_tester: Represents a pen tester who is responsible to create pen test findings as part of the application penetration testing.
sn_vul.app_pen_test_requester: select record for action: sn_vul.app_pen_test_requester.
Lifecycle of Penetration Testing
As an application owner, you can request the ethical hacking team for a penetration test assessment of your application. The ethical hacking team acts on this request and creates penetration test findings. These findings are manually created Application Vulnerable Items (AVIs).
The penetration testing workflow covers the penetration testing life cycle from raising the testing request to resolving the findings of the ethical hacking team.
Navigate to Workspaces > Penetration Test Workspace to view the dashboard and the Penetration Test Assessment Requests list.
--- title: Penetration Test Workspace description: The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team. locale: en-US canonical_url: https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen\_test\_workspace\_avr.html release: brazil product: Application Vulnerability Response classification: application-vulnerability-response topic_type: concept last_updated: "2026-09-10" reading_time_minutes: 1 breadcrumb: [Use, Application Vulnerability Response, Unified Security Exposure Management, Security Operations] --- # Penetration Test Workspace The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team. ## Roles required Penetration testing requires the following roles: **sn\_vul.app\_pen\_tester:** Represents a pen tester who is responsible to create pen test findings as part of the application penetration testing. **sn\_vul.app\_pen\_test\_requester:** select record for action: sn\_vul.app\_pen\_test\_requester. ## Lifecycle of Penetration Testing As an application owner, you can request the ethical hacking team for a penetration test assessment of your application. The ethical hacking team acts on this request and creates penetration test findings. These findings are manually created Application Vulnerable Items \(AVIs\). The penetration testing workflow covers the penetration testing life cycle from raising the testing request to resolving the findings of the ethical hacking team. Navigate to **Workspaces** > **Penetration Test Workspace** to view the dashboard and the Penetration Test Assessment Requests list.
| title | Penetration Test Workspace |
| description | The Penetration Test Workspace in Application Vulnerability Response permits you to request for penetration test assessment requests and track them using the workflow. It enables application owners to assess the security posture of their applications. It is the manual testing of an application by the ethical hacking team. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/security-management/application-vulnerability-response/pen\_test\_workspace\_avr.html |
| release | brazil |
| product | Application Vulnerability Response |
| classification | application-vulnerability-response |
| topic_type | concept |
| last_updated | 2026-09-10 |
| reading_time_minutes | 1 |
| breadcrumb | UseApplication Vulnerability ResponseUnified Security Exposure ManagementSecurity Operations |