Penetration Testing · External
External Penetration Testing
Adversary-emulated testing of your public-facing infrastructure.
What is an External Penetration Test?
An external penetration test targets the internet-facing infrastructure of your organization to identify vulnerabilities exposed to the public. This assessment evaluates public assets like web servers, firewalls, routers, and cloud environments. By simulating a real-world attacker, this structured project reveals exactly how external adversaries might breach your perimeter and gain unauthorized access to your internal network.
What We Test
- ▸Vulnerability scanning and manual exploitation
- ▸Open source intelligence gathering (OSINT)
- ▸Username and account enumeration
- ▸Breached credential intelligence gathering
- ▸Service, port, and website enumeration
- ▸Attacking login portals (Website, O365, VPN, etc.)
- ▸Multi-Factor Authentication (MFA) bypassing
- ▸Enumerating third parties for data leaks (S3 Buckets, GitHub, etc.)
- ▸Other testing depending on specific customer content and footprint
- ▸Free remediation re-test included