Your internal network is the non-public facing portion of your network. It is often overlooked as many businesses assume that the attacker will never breach the external perimeter. However, the attack surface is often so vast that it becomes very difficult to fully protect your network from a breach. A poorly secured internal network could lead to the theft of sensitive data, denial of service or active directory domain takeover.

As part of Internal Network Penetration Testing, we attempt to meet a number of objectives that we agree with you before the engagement, such as gaining access to a domain controller or a database storing sensitive information. We’ll document and prioritise any vulnerabilities found, and will include clear remediation steps that will help to better secure and protect your internal network.

Our internal network testing methodology is built upon the Penetration Testing Execution Standard (PTES) and the Open Source Security Testing Methodology Manual (OSSTMM). The vulnerabilities we look for vary depending on the technologies configured and the scope agreed with the client. Some of the typical activities undertaken include:

Findings are consolidated and prioritised in a report alongside clear remediation recommendations. The report is structured in a way that benefits stakeholders at all levels of technical understanding.