Concept · Brief definitionRelevant to you

TLPT (Threat-Led Penetration Testing)

Threat-led penetration testing is an advanced test in which ethical hackers mimic the tactics of real threat actors against a financial entity's live production systems supporting critical functions. DORA requires it at least every three years for entities identified by their supervisor, following the TIBER-EU methodology.

See related concepts

Roles that need it

This is a brief definition. A full explanation with a worked example is being written.

Skills it belongs to

Sources

Updated 31 Oct 2026.