Network penetration testing

Network Penetration Testing

From the outside in and the inside out. We test your internet-facing footprint, your internal network, and what an adversary can learn before touching either. Manual, senior-led, fixed price, remediation retest included.

Scope a network test See what we test
External

External / Perimeter Assessment

Attacker's-eye view of your internet-facing footprint, from exposed services to credential and config weaknesses.

What's tested
  • Exposed hosts and internet-facing services
  • Admin panels and forgotten subdomains
  • Credential weaknesses
  • Weak service configurations
Approach

We map the real attack surface, not just what's listed in scope on paper, then chain findings the way an actual adversary would use them. We agree on testing windows and anything off limits before testing begins.

Deliverables
  • Executive summary for leadership
  • Each finding with evidence, reproduction steps, and real-world impact
  • Prioritized remediation guidance
  • Remediation retest included

Scope this test →

Internal

Internal Network Penetration Test

What an attacker can reach once they're inside, delivered remotely through a testing device or VPN.

What's tested
  • Internal hosts and services
  • Network segmentation
  • Credential and configuration weaknesses
  • Paths to privilege escalation and lateral movement
Approach

Delivered remotely through a testing device or VPN. We chain low-severity gaps the way an attacker would. Testing is non-destructive by default and follows pre-approved safety parameters.

Deliverables
  • Executive summary for leadership
  • Each finding with evidence, reproduction steps, and real-world impact
  • Prioritized remediation guidance
  • Remediation retest included

Scope this test →

OSINT

OSINT & Attack Surface

What an adversary can learn before touching a single system, and every asset you forgot you exposed.

What's tested
  • Internet-exposed assets you've lost track of
  • Public information about your organization
  • Leaked data and credentials
Approach

We work the way an adversary does before an attack starts: from what's already out there, without touching your systems.

Deliverables
  • Inventory of what's exposed
  • Real-world impact for each exposure
  • Prioritized cleanup guidance
  • Remediation retest included

Scope this assessment →

FAQ

Network testing questions

Do you need to be on site for an internal test?
No. Internal testing is delivered remotely through a testing device or VPN.
Will testing disrupt our network?
Testing is non-destructive by default and follows pre-approved safety parameters. No disruptive exploit runs without your explicit authorization, and we agree on windows and anything off limits before testing begins.
Do you retest after we fix findings?
Yes. Retests are included within 90 days of report delivery, and the report is updated to show which findings are closed.
Is the price fixed?
Yes. Once we've scoped the work you get a fixed price, and the remediation retest is part of it. We'll also sign your NDA and MSA before any testing begins.

Find out what an attacker can reach.

Tell us what's in scope and your date. We'll come back with a scope, a timeline, and a fixed price.

Start the scoping form Email info@mavericksec.com