{"id":230467,"date":"2025-10-28T17:13:20","date_gmt":"2025-10-28T17:13:20","guid":{"rendered":"https:\/\/www.intrinsec.com\/?p=230467"},"modified":"2026-06-10T10:00:24","modified_gmt":"2026-06-10T10:00:24","slug":"type-de-pentest-black-box-vs-grey-box-guide-complet","status":"publish","type":"post","link":"https:\/\/www.intrinsec.com\/en\/type-de-pentest-black-box-vs-grey-box-guide-complet\/","title":{"rendered":"Pentest black box vs grey box: which one to choose?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"230467\" class=\"elementor elementor-230467\" data-elementor-settings=\"{&quot;element_pack_global_tooltip_width&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_width_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_width_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;element_pack_global_tooltip_padding&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_padding_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_padding_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true},&quot;element_pack_global_tooltip_border_radius_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;top&quot;:&quot;&quot;,&quot;right&quot;:&quot;&quot;,&quot;bottom&quot;:&quot;&quot;,&quot;left&quot;:&quot;&quot;,&quot;isLinked&quot;:true}}\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-1b5ed21 e-flex e-con-boxed e-con e-parent\" data-id=\"1b5ed21\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-262421cb elementor-widget elementor-widget-text-editor\" data-id=\"262421cb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\n<h2 id=\"h-les-types-de-pentest-black-box-vs-grey-box\" class=\"wp-block-heading\">types of pentest black box vs gray box<\/h2>\n\n<p class=\"wp-block-paragraph\">When we talk about <a href=\"https:\/\/www.intrinsec.com\/en\/test-intrusion\/\">penetration testing (pentest)<\/a>, The choice of methodology largely determines the quality and relevance of the security results. Two approaches are particularly dominant in organizations: black box penetration testing and grey box penetration testing. Understanding their differences and respective strengths is essential for accurately assessing the security level of your infrastructure.<\/p>\n\n<p class=\"wp-block-paragraph\">See also: <a href=\"https:\/\/www.intrinsec.com\/en\/diagnostic-de-maturite-cybersecurite\/\">cyber maturity assessment<\/a><\/p>\n\n<h2 id=\"h-type-de-pentest-black-box-la-simulation-de-l-attaquant-externe\" class=\"wp-block-heading\">Type of black box penetration test: simulation of an external attacker<\/h2>\n\n<p class=\"wp-block-paragraph\">A black box penetration test simulates a real attack carried out by a cybercriminal with minimal access to the targeted system. The penetration tester starts without any information about the organization&#039;s architecture, configurations, source code, or security policies.<\/p>\n\n<p class=\"wp-block-paragraph\">This approach places the auditor in the exact position of an external hacker seeking to compromise the system without prior knowledge. The tester must therefore explore, scan, and identify entry points independently, faithfully replicating the conditions of a real intrusion.<\/p>\n\n<h4 id=\"h-les-forces-du-black-box\" class=\"wp-block-heading\">The forces of the black box<\/h4>\n\n<p class=\"wp-block-paragraph\">The main advantage of the black box pentesting lies in its <strong>maximum realism<\/strong>. Since hackers typically have limited information about the information system they are trying to compromise, this approach accurately reflects the real-world conditions of an attack.<\/p>\n\n<p class=\"wp-block-paragraph\">This methodology allows security teams to reliably identify external vulnerabilities that could be quickly exploited by an attacker. The results highlight the most critical weaknesses and those immediately accessible from the outside.<\/p>\n\n<h4 id=\"h-les-contraintes-du-black-box\" class=\"wp-block-heading\">The constraints of the black box<\/h4>\n\n<p class=\"wp-block-paragraph\">However, black box testing has practical limitations. Because the penetration tester dedicates time to exploration and reconnaissance, the test is generally longer and therefore more expensive. Furthermore, they cannot access the internal layers of the system to identify deeper vulnerabilities, which limits the scope of the audit.<\/p>\n\n<p class=\"wp-block-paragraph\">See also: <a href=\"https:\/\/www.intrinsec.com\/en\/audit-cybersecurite\/\">Technical Audit<\/a><\/p>\n\n<h2 id=\"h-type-de-pentest-grey-box-la-solution-intermediaire-pragmatique\" class=\"wp-block-heading\">Grey box type of pentesting: the pragmatic intermediate solution<\/h2>\n\n<p class=\"wp-block-paragraph\">The grey box pentester is positioned between the black box and the white box, providing the pentester with a <strong>limited set of information<\/strong> on the targeted system. This intermediate approach offers a concrete starting point while maintaining a realistic threat aspect.<\/p>\n\n<p class=\"wp-block-paragraph\">During a grey box test, the penetration tester may receive user accounts with restricted rights, partial documentation on the architecture, access to certain client interfaces, or credentials allowing them to bypass the authentication step. The goal is to simulate an attack carried out by a cybercriminal who has gained initial access to the system.<\/p>\n\n<h4 id=\"h-les-avantages-du-grey-box\" class=\"wp-block-heading\">The advantages of the grey box<\/h4>\n\n<p class=\"wp-block-paragraph\">The grey box <strong>corresponds to the most realistic threat<\/strong> that organizations actually encounter. The majority of attacks do not start from scratch: the hacker has partial information, a compromised user account, or accesses the system as a malicious employee.<\/p>\n\n<p class=\"wp-block-paragraph\">This method allows testing efforts to be focused on priority risk areas, without wasting time on initial reconnaissance. It offers an excellent balance between threat representativeness and test effectiveness. The penetration tester can simulate various attack scenarios: access by employees, external contractors, or former employees.<\/p>\n\n<p class=\"wp-block-paragraph\">The grey box also tests <strong>defense mechanisms in depth<\/strong>. Once initial access is obtained, the auditor assesses network segmentation flaws, insufficient access validation mechanisms, and the detection of actions initiated from misused legitimate accounts.<\/p>\n\n<h4 id=\"h-les-points-de-vigilance-du-grey-box\" class=\"wp-block-heading\">Points of vigilance regarding the grey box<\/h4>\n\n<p class=\"wp-block-paragraph\">The grey box does not detect completely external vulnerabilities that require thorough initial reconnaissance. If you need to validate the robustness of your first lines of defense against an attacker with no prior information, the grey box will not provide that assurance.<\/p>\n\n<h2 id=\"h-quel-pentest-choisir-selon-votre-contexte\" class=\"wp-block-heading\">Which pentest should you choose based on your context?<\/h2>\n\n<p class=\"wp-block-paragraph\">The choice between black box and grey box depends closely on your security maturity and audit priorities.<\/p>\n\n<h4 id=\"h-optez-pour-le-type-de-pentest-black-box\" class=\"wp-block-heading\">Choose the black box type of pentesting<\/h4>\n\n<p class=\"wp-block-paragraph\">If you want to assess your defenses against a realistic attack from a completely external hacker, or if you&#039;ve never performed a penetration test before, this approach ensures coverage of the most accessible and critical vulnerabilities.<\/p>\n\n<h4 id=\"h-preferez-le-type-de-pentest-grey-box\" class=\"wp-block-heading\">Prefer the type of pentesting grey box<\/h4>\n\n<p class=\"wp-block-paragraph\">If you have already validated your first lines of defense, or if you are looking to simulate the most likely threats to your organization, the grey box is essential. <strong>the most frequently used methodology in business<\/strong> because it balances realism and pragmatism. It also remains valid for testing restricted access areas, client zones, or particularly sensitive functionalities.<\/p>\n\n<p class=\"wp-block-paragraph\">In practice, many organizations combine the two approaches across different scopes, depending on the maturity of each area. This multi-approach strategy offers comprehensive coverage while optimizing audit resources.<\/p>\n\n<h3 id=\"h-a-propos-de-nous\" class=\"wp-block-heading\">About Us<\/h3>\n\n<p class=\"wp-block-paragraph\">Intrinsec stands out for its\u00a0<strong>ANSSI official qualifications<\/strong>, attesting to our compliance with the most demanding regulatory, technical, and safety requirements of the French government. Our qualification\u00a0<a href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/decisions-qualifications\/2025_430_np.pdf\">PASSI LPM\/RGS<\/a>\u00a0covers all critical audit areas: architecture, configuration, source code, penetration testing, and organizational and physical audits.\u00a0<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-20bb3a6 elementor-widget elementor-widget-image\" data-id=\"20bb3a6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"1000\" height=\"500\" src=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-1024x512.png\" class=\"attachment-large size-large wp-image-230486\" alt=\"Les trois approches compar\u00e9es\" srcset=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-1024x512.png 1024w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-300x150.png 300w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-768x384.png 768w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-1536x768.png 1536w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-2048x1024.png 2048w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-18x9.png 18w, https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Copie-de-SAVE-650x325.png 650w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-section elementor-top-section elementor-element elementor-element-ae49bbb elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"ae49bbb\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-no\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-63a9fa0b\" data-id=\"63a9fa0b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-77be8dfb elementor-widget__width-initial elementor-widget-tablet__width-initial elementor-widget-mobile__width-inherit elementor-widget elementor-widget-heading\" data-id=\"77be8dfb\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">See also<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-5bb919bc elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"5bb919bc\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-7b109cd0\" data-id=\"7b109cd0\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-84c3ec7 bdt-icon-type-icon bdt-icon-effect-none elementor-widget elementor-widget-bdt-advanced-icon-box\" data-id=\"84c3ec7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_delay&quot;:&quot;200&quot;}\" data-widget_type=\"bdt-advanced-icon-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"bdt-ep-advanced-icon-box\">\n\n\t\t\t\t\t\t\t\n\t\t\n\t\t\t\t\n\t\t\t<div class=\"bdt-ep-advanced-icon-box-content\">\n\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t<h3 class=\"bdt-ep-advanced-icon-box-title ep-title-\">\n\t\t\t\t<span >\n\t\t\t\t\tPenetration test\t\t\t\t<\/span>\n\t\t\t<\/h3>\n\t\t\n\n\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<a class=\"bdt-ep-advanced-icon-box-readmore bdt-display-inline-block\" href=\"https:\/\/www.intrinsec.com\/en\/test-intrusion\/\">\n\t\t\t\t\t\tLearn more\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\n\t\t\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-29cdbe1a\" data-id=\"29cdbe1a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f2f9980 bdt-icon-type-icon bdt-icon-effect-none elementor-widget elementor-widget-bdt-advanced-icon-box\" data-id=\"f2f9980\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_delay&quot;:&quot;200&quot;}\" data-widget_type=\"bdt-advanced-icon-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"bdt-ep-advanced-icon-box\">\n\n\t\t\t\t\t\t\t\n\t\t\n\t\t\t\t\n\t\t\t<div class=\"bdt-ep-advanced-icon-box-content\">\n\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t<h3 class=\"bdt-ep-advanced-icon-box-title ep-title-\">\n\t\t\t\t<span >\n\t\t\t\t\tTechnical Audit\t\t\t\t<\/span>\n\t\t\t<\/h3>\n\t\t\n\n\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<a class=\"bdt-ep-advanced-icon-box-readmore bdt-display-inline-block\" href=\"https:\/\/www.intrinsec.com\/en\/audit-cybersecurite\/\">\n\t\t\t\t\t\tLearn more\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\n\t\t\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-412d7c25\" data-id=\"412d7c25\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-f92f1cc bdt-icon-type-icon bdt-icon-effect-none elementor-widget elementor-widget-bdt-advanced-icon-box\" data-id=\"f92f1cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation_delay&quot;:&quot;200&quot;}\" data-widget_type=\"bdt-advanced-icon-box.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"bdt-ep-advanced-icon-box\">\n\n\t\t\t\t\t\t\t\n\t\t\n\t\t\t\t\n\t\t\t<div class=\"bdt-ep-advanced-icon-box-content\">\n\n\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t<h3 class=\"bdt-ep-advanced-icon-box-title ep-title-\">\n\t\t\t\t<span >\n\t\t\t\t\tMaturity diagnosis\t\t\t\t<\/span>\n\t\t\t<\/h3>\n\t\t\n\n\t\t\n\t\t\t\t\t\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<a class=\"bdt-ep-advanced-icon-box-readmore bdt-display-inline-block\" href=\"https:\/\/www.intrinsec.com\/en\/diagnostic-de-maturite-cybersecurite\/\">\n\t\t\t\t\t\tLearn more\n\t\t\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\n\t\t\n\t\t\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-45e732a4 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"45e732a4\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-5545e124\" data-id=\"5545e124\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5c377520 elementor-widget__width-initial elementor-widget-tablet__width-initial elementor-invisible elementor-widget elementor-widget-heading\" data-id=\"5c377520\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Ready to Strengthen Your Cybersecurity?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-29d21a4d elementor-widget elementor-widget-spacer\" data-id=\"29d21a4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1aeafc4a elementor-widget__width-initial elementor-widget-tablet__width-initial elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"1aeafc4a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInDown&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Protect what really matters to your business. Our experts <br \/>cybersecurity experts will assist you in securing your <br \/>digital assets.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-6c5b51b3\" data-id=\"6c5b51b3\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-50c275c7 elementor-widget elementor-widget-spacer\" data-id=\"50c275c7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3b42e100 elementor-align-right elementor-tablet-align-center elementor-invisible elementor-widget elementor-widget-button\" data-id=\"3b42e100\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInUp&quot;,&quot;_animation_delay&quot;:300}\" data-widget_type=\"button.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-button-wrapper\">\n\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-sm\" href=\"https:\/\/booking.int.intrinsec.com\/\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Make an Appointment<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>les types de pentest black box vs grey box Quand on parle de tests d\u2019intrusion [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":230474,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[180,88],"class_list":["post-230467","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-evaluation-securite","tag-evaluation","tag-pentest"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.9 (Yoast SEO v27.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Types de pentest : black box VS grey box<\/title>\n<meta name=\"description\" content=\"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intrinsec.com\/en\/type-de-pentest-black-box-vs-grey-box-guide-complet\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Pentest black box vs grey box : lequel choisir ?\" \/>\n<meta property=\"og:description\" content=\"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intrinsec.com\/en\/type-de-pentest-black-box-vs-grey-box-guide-complet\/\" \/>\n<meta property=\"og:site_name\" content=\"INTRINSEC\" \/>\n<meta property=\"article:published_time\" content=\"2025-10-28T17:13:20+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-10T10:00:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1456\" \/>\n\t<meta property=\"og:image:height\" content=\"816\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Intrinsec\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:site\" content=\"@Intrinsec\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Intrinsec\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/\"},\"author\":{\"name\":\"Intrinsec\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/ade590fbc7ad6f413727bae7cd3fb799\"},\"headline\":\"Pentest black box vs grey box : lequel choisir ?\",\"datePublished\":\"2025-10-28T17:13:20+00:00\",\"dateModified\":\"2026-06-10T10:00:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/\"},\"wordCount\":1028,\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Types_pentest_grey_black_box.png\",\"keywords\":[\"Evaluation\",\"pentest\"],\"articleSection\":[\"S\u00e9curit\u00e9 offensive &amp; Audit\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/\",\"name\":\"Types de pentest : black box VS grey box\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Types_pentest_grey_black_box.png\",\"datePublished\":\"2025-10-28T17:13:20+00:00\",\"dateModified\":\"2026-06-10T10:00:24+00:00\",\"description\":\"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Types_pentest_grey_black_box.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/10\\\/Types_pentest_grey_black_box.png\",\"width\":1456,\"height\":816,\"caption\":\"Types_pentest_grey_black_box\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/type-de-pentest-black-box-vs-grey-box-guide-complet\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.intrinsec.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pentest black box vs grey box : lequel choisir ?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#website\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"name\":\"INTRINSEC\",\"description\":\"Notre m\u00e9tier , Prot\u00e9ger le v\u00f4tre\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.intrinsec.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#organization\",\"name\":\"INTRINSEC\",\"alternateName\":\"ISEC\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"contentUrl\":\"https:\\\/\\\/www.intrinsec.com\\\/wp-content\\\/uploads\\\/2025\\\/02\\\/libellule.png\",\"width\":1322,\"height\":1322,\"caption\":\"INTRINSEC\"},\"image\":{\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Intrinsec\",\"https:\\\/\\\/fr.linkedin.com\\\/company\\\/intrinsec\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC0trUZAHNZOUbxYnNdecM4A\"],\"description\":\"soci\u00e9t\u00e9 de consulting, pure player cybers\u00e9curit\u00e9 fran\u00e7ais et europ\u00e9en depuis plus de 30ans, sp\u00e9cialiste dans la s\u00e9curit\u00e9 offensive & audit (pentest\\\/red team), GRC, et services IMSS comme le SOC, CTI et CERT Intrinsec est qualifi\u00e9 PASSI Elev\u00e9, PRIS Elev\u00e9 et PACS par l'ANSSI\",\"email\":\"contact@intrinsec.com\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.intrinsec.com\\\/#\\\/schema\\\/person\\\/ade590fbc7ad6f413727bae7cd3fb799\",\"name\":\"Intrinsec\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g\",\"caption\":\"Intrinsec\"},\"sameAs\":[\"https:\\\/\\\/www.intrinsec.com\"],\"url\":\"https:\\\/\\\/www.intrinsec.com\\\/en\\\/author\\\/ufhtbqccsz\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Types of pentest: black box VS gray box","description":"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intrinsec.com\/en\/type-de-pentest-black-box-vs-grey-box-guide-complet\/","og_locale":"en_US","og_type":"article","og_title":"Pentest black box vs grey box : lequel choisir ?","og_description":"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche","og_url":"https:\/\/www.intrinsec.com\/en\/type-de-pentest-black-box-vs-grey-box-guide-complet\/","og_site_name":"INTRINSEC","article_published_time":"2025-10-28T17:13:20+00:00","article_modified_time":"2026-06-10T10:00:24+00:00","og_image":[{"width":1456,"height":816,"url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png","type":"image\/png"}],"author":"Intrinsec","twitter_card":"summary_large_image","twitter_creator":"@Intrinsec","twitter_site":"@Intrinsec","twitter_misc":{"Written by":"Intrinsec","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#article","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/"},"author":{"name":"Intrinsec","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/ade590fbc7ad6f413727bae7cd3fb799"},"headline":"Pentest black box vs grey box : lequel choisir ?","datePublished":"2025-10-28T17:13:20+00:00","dateModified":"2026-06-10T10:00:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/"},"wordCount":1028,"publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"image":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png","keywords":["Evaluation","pentest"],"articleSection":["S\u00e9curit\u00e9 offensive &amp; Audit"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/","url":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/","name":"Types of pentest: black box VS gray box","isPartOf":{"@id":"https:\/\/www.intrinsec.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#primaryimage"},"image":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png","datePublished":"2025-10-28T17:13:20+00:00","dateModified":"2026-06-10T10:00:24+00:00","description":"Les diff\u00e9rents types de pentest black box et grey box. Apprenez les forces, contraintes et quand utiliser chaque approche","breadcrumb":{"@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#primaryimage","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/10\/Types_pentest_grey_black_box.png","width":1456,"height":816,"caption":"Types_pentest_grey_black_box"},{"@type":"BreadcrumbList","@id":"https:\/\/www.intrinsec.com\/type-de-pentest-black-box-vs-grey-box-guide-complet\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.intrinsec.com\/"},{"@type":"ListItem","position":2,"name":"Pentest black box vs grey box : lequel choisir ?"}]},{"@type":"WebSite","@id":"https:\/\/www.intrinsec.com\/#website","url":"https:\/\/www.intrinsec.com\/","name":"INTRINSEC","description":"Our job is to protect yours.","publisher":{"@id":"https:\/\/www.intrinsec.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intrinsec.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.intrinsec.com\/#organization","name":"INTRINSEC","alternateName":"ISEC","url":"https:\/\/www.intrinsec.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","contentUrl":"https:\/\/www.intrinsec.com\/wp-content\/uploads\/2025\/02\/libellule.png","width":1322,"height":1322,"caption":"INTRINSEC"},"image":{"@id":"https:\/\/www.intrinsec.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Intrinsec","https:\/\/fr.linkedin.com\/company\/intrinsec","https:\/\/www.youtube.com\/channel\/UC0trUZAHNZOUbxYnNdecM4A"],"description":"Intrinsec, a consulting firm and pure-play French and European cybersecurity provider for over 30 years, specializes in offensive security and auditing (penetration testing\/red teams), GRC, and IMSS services such as SOC, CTI, and CERT. Intrinsec is qualified at PASSI High, PRIS High, and PACS levels by ANSSI.","email":"contact@intrinsec.com"},{"@type":"Person","@id":"https:\/\/www.intrinsec.com\/#\/schema\/person\/ade590fbc7ad6f413727bae7cd3fb799","name":"Intrinsic","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fde6ed961c7078765b03a213927b5c4001b1cef4787255188f5b502a99e6ddd6?s=96&d=retro&r=g","caption":"Intrinsec"},"sameAs":["https:\/\/www.intrinsec.com"],"url":"https:\/\/www.intrinsec.com\/en\/author\/ufhtbqccsz\/"}]}},"_links":{"self":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/230467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/comments?post=230467"}],"version-history":[{"count":17,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/230467\/revisions"}],"predecessor-version":[{"id":232078,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/posts\/230467\/revisions\/232078"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media\/230474"}],"wp:attachment":[{"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/media?parent=230467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/categories?post=230467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.intrinsec.com\/en\/wp-json\/wp\/v2\/tags?post=230467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}