Overview
Wireless testing needs someone within radio range of your site. For UK locations we use a remote test device sent to your office, with a site contact to power it on, or we agree on-site arrangements at scoping. Guest isolation and PCI DSS wireless requirements are covered as standard.
Wireless networks are a physical-world entry point that many security programmes overlook. Weak pre-shared keys, misconfigured enterprise authentication, rogue access points and poorly isolated guest networks can all give attackers a foothold without ever touching your internet perimeter.
Our WiFi penetration tests assess the encryption and authentication of your corporate and guest networks, attempt credential capture through evil-twin attacks, search for rogue access points, test client isolation, and — where a foothold is gained — show what internal systems are reachable.
Testing can be delivered on site or using a remote wireless testing kit shipped to your location.
How testing works for UK organisations
- Signed scope and written authorisation before any testing, in line with the Computer Misuse Act 1990
- Testing windows agreed in UK time, including out-of-hours windows for production systems
- Fully remote delivery, with internal and wireless access via VPN or a posted test device, so there are no travel costs
- Reports mapped to ISO 27001, PCI DSS, UK GDPR Article 32 and customer questionnaires, with a fixed price in GBP
What's included
Our approach
- SurveyMap SSIDs, access points and coverage.
- AssessTest encryption and authentication configuration.
- AttackAttempt credential capture and network access.
- PivotAssess reachability of internal systems.
- ReportFindings with configuration fixes.
What you receive
- Wireless network inventory
- Rogue AP findings
- Authentication and encryption findings
- Segmentation test results
- Remediation guidance and retest
Standards & frameworks
- PTES
- NIST SP 800-153
- PCI DSS 11.2 (wireless)
- CIS Controls 12
- NCSC penetration testing guidance
Frequently asked questions
Does WiFi testing require someone on site?
Not always. We can ship a pre-configured remote testing device for many engagements.
Will testing disconnect our users?
We avoid disruptive techniques unless agreed; any deauthentication testing is done in controlled windows.
Does PCI DSS require wireless testing?
PCI DSS requires processes to detect and identify authorised and unauthorised wireless access points, typically at least quarterly.
Are you CREST or CHECK accredited?
We don't claim CREST or NCSC CHECK status on this site. Most private-sector tests, including those for ISO 27001, PCI DSS and customer due diligence, don't require either. If a contract, public-sector buyer or regulator specifically requires a CHECK or CREST-accredited provider, tell us at scoping and we'll tell you honestly whether we can meet it. See our CREST and CHECK guide.
Do you quote in pounds sterling?
Yes. UK proposals are fixed-price and quoted in GBP. Prices exclude VAT where VAT applies to cross-border services. We confirm the treatment for your organisation in the proposal.