Network Penetration Testing
Network penetration testing shows what an attacker could reach and do on your infrastructure, either from the internet or from inside your network. I find exposed services, weak configurations and paths that lead from a small foothold to sensitive systems.
Types of network test
- External network testing: everything reachable from the internet, including firewalls, VPNs, mail servers, remote access and forgotten hosts.
- Internal network testing: what an attacker or malicious insider could do from inside your office or VPN, including lateral movement and privilege escalation.
- Wireless testing: Wi-Fi encryption, guest network separation and rogue access points (on site, by arrangement).
What I look for
- Exposed and outdated services with known vulnerabilities.
- Default, weak or reused credentials.
- Missing network segmentation between user, server and sensitive zones.
- Insecure protocols and misconfigured TLS, SMB, SNMP, RDP and SSH.
- Active Directory weaknesses on internal tests.
- Firewall and VPN configuration gaps.
How I work
The approach follows the Penetration Testing Execution Standard (PTES).
- Scoping and rules of engagement: IP ranges, exclusions, testing windows and emergency contacts.
- Discovery: host and service enumeration, and OSINT for external tests.
- Vulnerability analysis: scanning, followed by manual verification to remove false positives.
- Controlled exploitation: proving real impact without disrupting production systems.
- Reporting and retest.
What you get
- An executive summary and a technical report with every finding, its severity and evidence.
- Attack paths showing how individual weaknesses combine.
- Prioritised remediation steps and a retest of fixes.
Related services
If your infrastructure runs on AWS, see cloud security. For a broader, lower-cost review, see vulnerability assessment.
Get started
Tell me what you want tested, how large it is and when you need it, and we can agree a scope. Contact me to discuss your network.