Simple definition
A proof of concept, or PoC, is a limited demonstration that tests the feasibility of an idea, mechanism or vulnerability.
Purpose and use
In security it can demonstrate an effect under specific conditions without being a complete tool or a measurement of actual production impact.
How does it work?
The demonstration establishes prerequisites and observes a result. Its scope depends on the environment, versions and documented assumptions.
Key points
- Example: a laboratory reproduces a flaw using test data, then verifies that a fix prevents the same result.
- Record versions, configuration, conditions and expected results so the test can be interpreted.
Points to watch
A published PoC may contain dangerous or incomplete code. Do not run it in production or with real secrets as a casual verification step.
In short
A PoC establishes feasibility in a defined setting, not universal applicability or safety.