Web application penetration test
Testing focused on a specific application, its logic, authentication, and handling of user input.
Application testing goes beyond the infrastructure it runs on. It examines whether one user can reach another's data, whether roles can be bypassed, and whether input handling allows injection.
Business logic flaws are the class automated tooling misses entirely, because nothing is technically broken. Completing a purchase with a negative quantity is a logic problem, not a vulnerability signature.
Where this comes up
Web application penetration test sits inside our penetration testing work. If you are trying to work out what this means for your own environment rather than in the abstract, that is the page worth reading next, and a short call will get you a straight answer faster than either.