A proof-of-concept (PoC) test is a small working example that shows whether a vulnerability can actually be reproduced. In cybersecurity, it usually proves that a flaw exists by demonstrating a controlled action, such as triggering a crash, reading unintended data, or reaching an unsafe state. A PoC is not always a full exploit; it is often the first reliable step in understanding impact.
PoC tests matter because they help defenders verify reports, prioritize fixes, and confirm that a patch really closes the weakness. Security researchers use them to validate findings in lab conditions, while attackers may use the same idea to check whether a target is vulnerable before building a more complete attack chain. In benchmarks and agentic security tools, PoC generation is a practical measure of vulnerability-reproduction ability, but it should be contained, logged, and reviewed, since even a small working example can be dual-use.