External Network Penetration Testing

An external network penetration test targets the systems and services your organisation exposes to the internet: public-facing servers, firewalls, VPN gateways, mail servers, and any other assets reachable from outside your network. The test is conducted remotely, without any prior access to your internal environment.

The objective is to find out what an attacker on the internet can see, and what they can do with it.

Methodology and standards

Our external testing follows recognised industry frameworks:

• OSSTMM (Open Source Security Testing Methodology Manual)
• PTES (Penetration Testing Execution Standard)
• ISO 27002

What you receive

At the end of the engagement you receive a written report covering every finding, its risk level, and the steps needed to remediate it. Critical findings are communicated immediately, without waiting for the final report.