Internal penetration testing
From one compromised laptop to domain admin: we find the paths an attacker would take inside your network, and show you how to close them.
When you need it
- You're worried about ransomware
- Your insurer asks for an internal test
- After a merger or major IT change
- ISO 27001 or Cyber Essentials Plus preparation
What we test
We start where a real attacker would: with a single standard user account or a device plugged into your network. From there we look for every route to your most valuable systems.
Kerberos weaknesses, delegation abuse, risky permissions and group memberships.
Weak and reused passwords, cached credentials, secrets left in shares and scripts.
From standard user to local and domain administrator.
Whether one compromised machine can reach servers, backups and sensitive data.
How the test runs
- Scoping. We agree sites, user count, critical systems and any no-go areas.
- Access. A remote testing device or VPN, plus a standard user account. On-site testing is available.
- Testing. Usually a few days, in or outside office hours, with critical findings reported immediately.
- Report and debrief. Attack paths, prioritised fixes and a walkthrough call. One retest within 90 days is included.
Supports
- ISO 27001
- Cyber Essentials Plus prep
- PCI DSS
- Cyber insurance
Questions
Will testing disrupt our network?
We avoid denial-of-service techniques, agree any risky steps with you first, and can test outside office hours.
Do you need to come on site?
Usually not. Most internal tests run remotely through a small device or VPN you connect to your network.
What if you find something critical?
We tell you straight away, so you don't have to wait for the report.
Know exactly what your test will cost by tomorrow
Tell us what you need tested. You'll get questions or a fixed quote within three working days.