Order Service
Complete the details in the contact form.
Infrastructure
Security Testing
Protect your infrastructure from potential breaches with our customized testing options:
INFRASTRUCTURE / SECURITY
01External perimeter
02Internal network
03Active Directory
IDENTIFY VALIDATE STRENGTHEN
Explore Service Details
Automated Vulnerability Scanning
€450
Target
IP Addresses
Type
Automated
Tools
Industry-standard vulnerability scanners (network and service-level)
Key Focus
- Outdated software and patch management issues.
- Misconfigured services and protocols.
- Weak or default credentials on network devices.
- Open ports and services exposing sensitive information.
- SSL/TLS configuration issues.
- Publicly known vulnerabilities (CVE-based scanning).
Delivery
1.5 days / 50 IPs.
External Infrastructure Penetration Testing
€600 + €400/extra day
Target
IP Addresses
Type
Automated and Manual
Tools
Scanners + manual exploitation tools & frameworks (e.g., password brute-forcing, service exploitation)
Key Focus
- All from Automated
- Weak perimeter defenses, such as misconfigured firewalls or VPNs.
- Exploitable open ports and services.
- Insecure file-sharing protocols (SMB, FTP, etc.).
- Credential brute-forcing on exposed services (e.g., SSH, RDP).
- Publicly exposed sensitive data or misconfigured DNS settings.
- Vulnerabilities in web server configurations or hosted applications.
- Exploitable vulnerabilities in third-party software or systems.
- Inadequate email security configurations (e.g., SPF, DKIM, DMARC).
- Cloud exposed services (misconfigured S3 buckets, exposed Azure blobs, etc.)
Delivery
2 days min / 50 IPs.
Internal Infrastructure Penetration Testing
€900 + €400/extra day
Target
IP Addresses, VPN access, User credentials, Infrastructure Insights
Type
Automated and Manual with Internal Knowledge
Tools
Full toolset including AD security assessment, credential harvesting, privilege escalation frameworks, and custom scripts
Key Focus
- All from Automated & External
- Sensitive information exposure in file shares or internal applications.
- Insufficient network segmentation.
- Insecure protocol usage (e.g., outdated SMB or Telnet).
- Lateral movement vulnerabilities, such as unprotected admin shares or misconfigured RDP.
- Weak or outdated encryption on internal communications.
- Privilege escalation opportunities (e.g., misconfigured services or applications).
- Insecure Active Directory configurations, such as weak Kerberos policies or mismanaged group permissions.
- Credential harvesting and reuse attacks (e.g., NTLMv2 relay, pass-the-hash, pass-the-ticket).
Delivery
3 days min(depending on the company size).
Step-by-step process.
Scope Review
We discuss effort and resources for the project.
Contract
Signing the agreement to start testing.
Execution
Simulating real-world attacks on your assets.
Delivery
Receive the final report and remediation steps.
