Service 1.3

External network penetration testing.

We look at everything your company exposes to the internet, find what you forgot, and test whether any of it lets an attacker in.

1 What we test

Discovery: the hosts, domains and services you expose, including the ones missing from your inventory.
Open services: known vulnerabilities, default or weak passwords, and software that no longer gets updates.
Remote access: VPN, remote desktop and the other ways your staff connect from outside.
Mail: the settings that stop others from sending mail in your name (SPF, DKIM, DMARC).
Forgotten systems: admin pages, old test sites, backups and files left online.

Method: PTES, NIST SP 800-115.

Denial of service, phishing, assets you do not own.

Your public IP ranges and domains.
Written consent from any hosting provider or third party whose terms require it.
A contact we can call during the test windows.

Scope call: we agree the ranges, the domains, the test windows and who to call. You get a written offer with dates and price.
You sign the authorization. Nothing reaches your systems before that.
Discovery: we list what is exposed and check each item is yours before testing it.
We test each exposed service, from fixed IP addresses you know in advance.
A critical finding goes to your contact as soon as it is proven. It does not wait for the report.
Report and readout, then a retest once you have fixed.

Document	What it holds	For
Technical report	Each finding with its exploit path, proof, CVSS 4.0 score, CWE and fix.	Developers, IT
Executive report	Five to eight pages on business risk, in plain words.	Management, board
Remediation plan	Findings ranked by what to fix first.	IT, project leads
Readout	A remote session to walk through the findings and answer questions.	Both
Retest attestation	Proof that the findings were fixed.	Auditors, clients

How long does it take?: It depends on the number of addresses and services. The written offer gives the number of testing days and the dates before you sign.
What if you find a system that was not on our list?: We tell you and do not test it. It stays out of scope until you confirm it is yours and add it in writing.
Will it set off our alarms?: It may, and that is useful to know. Tests come from fixed IP addresses given in advance, so your team can tell us from a real attack.
Is phishing included?: No. Phishing and other social engineering are not part of this test.

Tell us what needs testing. A tester replies with a written offer: scope, dates and price.