Overview
External testing shows what an attacker on the internet can reach, and internal testing shows how far they could go after phishing a single member of staff. For UK organisations, internal access is provided over a secure VPN or a small test device we ship to you, so no travel costs are involved.
Ransomware groups rarely need zero-days. They get in through an unpatched VPN appliance, an exposed remote desktop service or a phished laptop — and then move laterally through flat networks and over-privileged accounts until they reach domain admin and your backups.
Our external tests map and attack everything you expose to the internet. Our internal tests start from an assumed-breach position — a standard user on a corporate device — and show the path an attacker would take to your most critical systems.
Wireless networks and voice systems are tested as separate, specialist engagements — see our WiFi and VoIP penetration testing services.
How testing works for UK organisations
- Signed scope and written authorisation before any testing, in line with the Computer Misuse Act 1990
- Testing windows agreed in UK time, including out-of-hours windows for production systems
- Fully remote delivery, with internal and wireless access via VPN or a posted test device, so there are no travel costs
- Reports mapped to ISO 27001, PCI DSS, UK GDPR Article 32 and customer questionnaires, with a fixed price in GBP
What's included
Our approach
- DiscoveryAsset discovery and service enumeration across agreed IP ranges and domains.
- Vulnerability analysisCombining scanning with manual validation to remove false positives.
- Exploitation & escalationSafe exploitation and privilege escalation toward agreed objectives.
- Lateral movementDemonstrating realistic paths to crown-jewel systems and data.
- Report & retestAttack narrative, prioritised fixes and verification of remediation.
What you receive
- External exposure map
- Internal attack path narrative
- Segmentation test results (PCI DSS)
- Active Directory hardening recommendations
- Retest report and attestation letter
Standards & frameworks
- PTES
- NIST SP 800-115
- PCI DSS 11.4
- MITRE ATT&CK
- CIS Controls
- NCSC penetration testing guidance
Frequently asked questions
Can internal testing be done remotely?
Yes. We provide a pre-configured virtual machine or small device that connects securely back to our testers, avoiding travel costs.
How often should network tests be performed?
At least annually and after significant infrastructure change. PCI DSS requires internal and external testing at least every 12 months and after significant changes.
Will you take down our network?
No. We avoid disruptive techniques unless explicitly agreed and coordinate testing windows for fragile systems.
Are you CREST or CHECK accredited?
We don't claim CREST or NCSC CHECK status on this site. Most private-sector tests, including those for ISO 27001, PCI DSS and customer due diligence, don't require either. If a contract, public-sector buyer or regulator specifically requires a CHECK or CREST-accredited provider, tell us at scoping and we'll tell you honestly whether we can meet it. See our CREST and CHECK guide.
Do you quote in pounds sterling?
Yes. UK proposals are fixed-price and quoted in GBP. Prices exclude VAT where VAT applies to cross-border services. We confirm the treatment for your organisation in the proposal.