See how far an attacker could get inside your network, and whether you'd notice.
I test your networks, devices, servers, and cloud environment the way a real attacker would: getting in, moving around, and trying to take data out. You get a clear picture of what's exposed, what your defenses catch, and what to fix first. One person scopes the work, does the testing, and writes the report.
Request a scoping callWhat I test for
Each area is explained in plain language first, then in technical detail for your IT team.
Initial access
What's the easiest way for an outsider to get a foothold in your systems?
External attack surface review, exposed services and remote access (VPN, RDP, SSH), unpatched or misconfigured internet-facing systems, default credentials, and weak entry points into the internal network.
Identity
If someone gets one employee's login, how much of your business can they reach with it?
Active Directory and identity provider configuration, password policy and reuse, MFA coverage, privilege escalation paths, over-permissioned accounts, and service account exposure.
Persistence
Could an attacker stay hidden in your systems for weeks, even after you think you've kicked them out?
Simulated persistence mechanisms such as scheduled tasks, startup items, new accounts, and stored credentials, and whether your team detects and removes them. All techniques are agreed in scope and cleaned up afterward.
Exfiltration
If an attacker found your sensitive data, could they walk out with it without anyone noticing?
Egress filtering, data loss prevention gaps, and outbound channels such as DNS, HTTPS, and cloud storage. Testing uses agreed dummy data, not your real records.
Defensive evasion
Do your security tools and logs actually catch suspicious activity, or can it slip past them?
Assessment of endpoint protection, logging, alerting, and monitoring coverage against realistic attacker behavior, with a summary of what was detected, what was missed, and how to close the gaps.
Network and IoT
Are your printers, cameras, and smart devices quietly giving attackers a way in?
Network segmentation review, internal and wireless testing, discovery of unmanaged devices, insecure protocols, and IoT and embedded devices with default or weak credentials and outdated firmware.
OS and cloud
Are your servers, workstations, and cloud accounts set up securely, or left open by mistake?
Windows and Linux hardening and patch levels, local privilege escalation, cloud identity and access configuration, publicly exposed storage and services, and misconfigured security groups and roles.
How I keep it safe and authorized
Testing live systems calls for clear ground rules.
Written scope and authorization
Nothing starts until we agree in writing on which systems are in bounds, the testing window, and what is off limits.
Minimal disruption
I avoid actions that could take systems down, use agreed test data, tell you immediately about anything critical, and undo any changes made during testing.
What working together looks like
- ScopeWe agree on targets, testing window, and rules of engagement in writing.
- TestI work through the areas above against your environment.
- ReportYou get an executive summary for leadership and detailed findings for your IT team, each with severity, evidence, and a fix.
- QuestionsI walk your team through the results so nothing is left ambiguous.
Not sure what's in scope?
Tell me about your environment and I'll tell you what's worth testing.
Get in touch