Glossary: Vulnerability, Asset and Change Management

Partially known environment

Also written: gray box, grey box

A pen test where the testers get some facts, often a normal user account, to simulate an insider or a phished employee. Kettle & Crane chose this kind.