Cybersecurity service
Internal Network Penetration Testing
Authorised testing of an internal network to understand what an attacker with internal access could reach.
Internal network penetration testing simulates an attacker, or a malicious insider, who already has access to the internal network, and assesses what they could discover and reach.
Depending on the authorised scope, we combine manual testing and verification with automated tools such as Burp Suite, Nmap, Nuclei, OWASP ZAP, Nessus and SQLmap, and other suitable tools. Not every tool is used in every engagement.
Who it is for
- Businesses with internal networks, office systems or internal applications
What is in scope
- Internal hosts, ranges and services listed in the written scope
- Identification and manual verification of weaknesses reachable from the agreed access point
How we work
- Agree scope and access. The agreed access method, targets, windows, permitted techniques, exclusions and stop conditions are documented in writing first.
- Assess and verify. We test the in-scope systems and verify findings with minimal impact.
- Report. We deliver verified findings, potential impact and remediation recommendations.
What you receive
- A written report with verified findings and supporting evidence
- Severity where justified and remediation recommendations
Limitations
- Persistence, malware deployment, denial-of-service and physical testing are excluded unless separately authorised in writing.
- A security assessment reduces risk but cannot guarantee that every vulnerability will be found or that a system will remain secure.
- Retesting is optional and can be agreed separately; it is not automatically included.
What we need from you
- Written authorisation from the owner of every in-scope asset before testing starts
- An agreed way to access the internal network
- Emergency contacts for the testing window
Frequently asked questions
Do you need to be on site?
The access method is decided during scoping and recorded in the written scope.
Ready to talk about your project?
Tell us what you need and we will reply with next steps.