Network Penetration Testing

An external penetration test focuses on the IT infrastructure that can be accessed from outside of the organization’s network (via the public internet). The systems tested could consist of routers, firewalls, servers, on-premises IT systems, and even cloud infrastructure. This type of penetration test allows an organization to understand if and how an attacker can gain access to the internal network from the outside.

An internal penetration test focuses on the IT infrastructure that can only be accessed usually from within an organization’s corporate network. Like an external penetration test, the systems tested could consist of routers, firewalls, servers, on-premises IT systems, and cloud infrastructure. This type of penetration allows an organization to understand what an attack can do within the network once they’ve broken through external defenses.

A wireless penetration test focuses on an organization’s WLAN (wireless local area network) to help identify weaknesses in wireless access points, rogue access points, and an attacker’s ability to identify and examine the connections between devices connected to the WLAN.

A social engineering penetration test focuses on the human aspect of cybersecurity by attempting to bypass security controls through social engineering techniques. The objectives can vary between obtaining sensitive data to gaining access to internal networks/systems. Social engineering penetration tests seek to assess the security controls and responsiveness of the company’s staff in order to improve the overall awareness of staff and the effectiveness of the security tools in place

A physical penetration test focuses on simulating a malicious outsider’s ability to compromise a organization’s physical security controls to gain access to the inside of the buildings, infrastructure, systems, and employees. This also includes gaining access to sensitive information/resources though physical interactions, and often involves aspects of Social Engineering.

Web application penetration tests focus on targeting web-based applications, identifying their vulnerabilities, and attempting to exploit them to gain access to the data being hosted by the web application.

These scans include a deep level of detail about the current state of network security risks within your business.

Security engineers capture a cross-section of information about your network, including patching status and possible software misconfigurations. We create an executive report and a technical report, and present these findings to key stakeholders and your IT staff.