What’s included
This External Infrastructure Penetration Test uses a blend of automated scanning and advanced manual testing to identify weaknesses in systems accessible over the internet – such as:
- Remote access solutions (e.g. VPNs and Citrix)
- Email and file transfer gateways
- Exposed ports and services
- Cloud-based admin interfaces and storage
- Web applications hosted externally
You’ll get expert guidance throughout the engagement, and a detailed report outlining exactly where you’re exposed and how to fix it.
Download the full service description
Your report will include:
At the end of the test, you will receive a comprehensive report broken down into:
Executive summary – A plain-English overview of your organisation’s exposure, written for business leaders.
Technical findings – Clear descriptions of each vulnerability, including risk level and remediation guidance.
Methodology and scope – Transparent documentation of how we tested and what was covered.
Consultant commentary – Practical advice tailored to your environment, not just a list of scan outputs.
Our approach
We follow industry-recognised standards such as SANS, OSSTMM and OWASP, combining automated tools with in-depth manual techniques. This ensures we identify issues that automated scanners often miss – and provide meaningful insights, not just raw data.
Every test is conducted by experienced consultants who validate each finding and provide context to help you understand what it means for your business.
Is this service right for you?
This test is ideal if you:
- Manage public-facing services like VPNs, email gateways or cloud interfaces
- Are deploying a new remote access solution or making changes to your perimeter defences
- Need to meet testing requirements for compliance schemes like ISO 27001 or PCI DSS
- Want to assess your external security posture as part of a broader cyber resilience programme
The test covers up to 20 external IP addresses. If you require a larger scope, we’ll provide a custom quote.
