Penetration Testing

We test systems and services accessible from the internet—such as VPN access points, firewalls, email servers, and web servers.

We test the network infrastructure and systems from the perspective of an internal attacker—e.g., office IT, Active Directory, and file shares.

We test login areas, customer portals, booking systems, and other web applications—for both anonymous and authenticated users.

We test the Entra ID cloud infrastructure—including access controls and role assignment.

We test interfaces of web applications, mobile apps, or backend systems—including authentication, input validation, and permission checks.

We test a deployed Windows client—focusing on configuration, local permissions, password storage, and tamper protection.

We test physical access points and security-related infrastructure—such as reception areas, doors, and access controls.

We test your Active Directory from the perspective of an internal attacker—focusing on vulnerabilities and misconfigurations with critical or high risk.

We collect all publicly available information about your organization, such as IP address ranges, domains, subdomains, web applications, and email addresses. The results serve as the perfect foundation for a customized external penetration test.

We assess password security within your Active Directory. Using various password-cracking techniques, we identify all passwords that pose a security risk.

We assess network segmentation and the structure of your corporate network. This involves determining whether individual network segments are effectively separated from one another and whether access to sensitive, critical areas, services, and applications is properly secured.