Infrastructure testing
What the internet can see, what a normal user can become inside the network, and whether your Wi-Fi lets someone in. Each is its own scope.
- External, internal and wireless
- Human-led
- Retest included
-
External and internalBooked separately
-
Led by a personNot a raw scanner dump
-
Backed by proofFindings reproduced
-
Followed by a retestIn-scope fixes checked again
Assessments in this area
External infrastructure testing
Internet-facing hosts, remote access, DNS and email authentication.
Explore →Internal network and Active Directory
From a standard user to domain control: credentials, escalation and lateral movement.
Explore →Wireless penetration testing
Wi-Fi authentication, segmentation, rogue access points and the path inside.
Explore →Latest infrastructure research
Recent write-ups on edge and remote-access infrastructure, with patch, hunt and hardening steps for defenders.
Frequently asked questions
Does an external test include internal systems?
No. External testing covers what the internet can reach. Internal and Active Directory testing is a separate scope.
Can these be booked together?
Yes. Many organisations combine external, internal and wireless testing in one engagement.
Internal AD lateral-movement pattern
Anonymised internal AD / identity engagement pattern: meaningful privilege paths versus scan noise, with remediation and retest framing.
Read the case study →- Human-led
- Retest included
- Scoped before any active work
Not sure which one fits?
Describe the system and what worries you. We reply with a suggested scope.
Request a free scope review →