Simulated penetration testing is security testing carried out in a replica, digital twin, or model of a real environment instead of directly against production systems. The goal is to observe how an attacker might move, what controls would fail, and whether a path to a sensitive asset actually exists, without risking outages, safety issues, or data loss.
This approach matters most in operational technology and other high-availability environments, where even routine testing can disrupt processes. Defenders use simulations to validate segmentation, identify reachable attack paths, and check whether a vulnerability is truly exploitable in the current layout. In real attacks, adversaries exploit misconfigurations, weak trust relationships, and missing boundaries; simulated testing helps teams rehearse those same tactics safely and prioritize fixes based on realistic impact. Its accuracy depends on how faithfully the model reflects the live environment.