External & internal network penetration testing
Find out what an attacker could reach from the internet and from inside your network, before they do.
The problem
You have invested in security controls, but you have never seen how they hold up against a real attempt.
A customer, insurer or board is asking for independent evidence of your exposure.
What’s included
- Scoping and written authorisation
- External perimeter testing
- Internal network testing
- Active Directory and lateral movement testing, if in scope
- Risk-rated report
- Debrief with your technical team
Deliverables
- Rules of engagement document
- Executive summary
- Technical report with evidence and remediation guidance
- Debrief session
How it works
Assess & understand
We agree targets, limits and test windows, and you sign the authorisation.
Design & plan
We map the exposed services and plan the test against your scope.
Implement & configure
We test within the rules of engagement and alert you to critical issues quickly.
Test & handover
We deliver the report, walk through the findings and agree next steps.
Frequently asked questions
Do we need to tell our IT team?
That is your decision. The rules of engagement record who knows about the test and how we reach them.
What happens if you find something critical?
We contact your nominated person straight away rather than waiting for the final report.
How do you test the internal network remotely?
Usually through a small testing device or virtual machine placed on your network, removed at the end of the test.
Ready to talk about network penetration testing?
Tell us what you are planning and get a written list of next steps.