Offensive security is an essential part of a cybersecurity program, but it is often misunderstood, which could lead to not achieving the goals of an organization. An example of a lack of understanding is requesting the wrong type of assessment, such as an adversary emulation instead of a pentest.