A ÉTICA NO CENÁRIO DE PENTESTS.

With the constant increase in news about cyber attacks, interest in the topic is also growing, especially in relation to data protection measures. Some individuals try to alert companies about possible thefts and leaks, but illegally. These attacks, commonly carried out by people known as hackers, leave organizations vulnerable. In response, many companies have invested in pentesting — security tests that simulate attacks on an infrastructure to identify and highlight vulnerabilities in systems and networks. Pentesters, the professionals responsible for these tests, are increasingly in demand globally, mainly due to the increase in malicious attacks. In this context, the ethics of hackers who act anonymously are often questioned, as they appropriate sensitive information. The purpose of the present study is therefore to understand the role of companies in protecting the data they store and the ethics involved in the practice of pentesting in a controlled environment.