Overview. Vulnerability Assessment and Penetration Testing (VAPT) is a process used to identify, analyze, and report security vulnerabilities in a system or network. It is used to identify potential security risks and to determine the effectiveness of existing security measures. VAPT is used to identify and address security weaknesses before.