Internal Network Penetration Testing
How far can an attacker get once inside your network? Testing for Active Directory and internal systems.
Services
External Network Penetration Testing
Every attacker on the internet sees the same IP addresses and domains you do. An external test checks whether that view opens a door you don't know about.
Forgotten test servers, admin panels left with default passwords, unpatched VPN appliances and misconfigured cloud services are still among the most common ways in.
We start with passive reconnaissance to map your assets, then actively test services within the agreed scope. We never touch systems outside that scope.
What we test
- Domains, subdomains and DNS configuration
- Open ports and services; version and configuration analysis
- VPN, remote desktop and other remote access points
- Email security: SPF, DKIM, DMARC
- TLS/SSL configuration and certificates
- External exposure of cloud storage and management interfaces
How we work
Passive reconnaissance
We identify your internet-facing assets using open-source intelligence and certificate transparency logs.
Service analysis
We scan approved IP addresses and domains for ports and services and review versions and configurations.
Verification and exploitation
We verify findings manually and demonstrate their impact in a controlled manner.
Reporting
You receive an asset inventory, the findings and prioritised hardening advice.
What you receive
- Inventory of internet-facing assets
- Executive summary
- Technical findings scored with CVSS v4.0
- Hardening and remediation advice
A good fit for
- Businesses with remote teams
- SMEs hosting their own servers
- Ahead of cyber insurance or customer audits
Frequently asked questions
We don't know our IP addresses. Is that a problem?
No. We present the assets we find during reconnaissance, and we confirm the scope with you before any active testing.
Do we need permission from our hosting provider?
Some cloud and hosting providers have testing policies. We check any required notifications together during scoping.
Related services
Vulnerability Assessment
Broad scanning, verification and prioritisation of known vulnerabilities across your systems.
Continuous Security and Attack Surface Monitoring
Regular monitoring of your internet-facing assets, with alerts for new exposures and changes.
See your weaknesses before attackers do.
Let's define the scope together. You'll receive a written proposal with the right type of test and a clear timeline.