These phases provide a structured framework for conducting security assessments. The Penetration Testing Execution Standard (PTES) includes seven phases: Pre-engagement, Intelligence Gathering, Threat Modeling, Vulnerability Analysis, Exploitation, Post-exploitation, and Reporting.