Australian-owned · Northern Rivers NSW · Authorised testing only

Penetration testing

Find the exploitable weaknesses in your networks and internet-facing systems before an attacker does — under a signed scope, with findings your team can act on.

Book a scoping call How an engagement works →

What we cover

External network testing

Internet-facing hosts, services, VPNs and remote access, tested the way an outside attacker would approach them.

Internal network testing

An assumed-foothold view of your internal network: privilege escalation, lateral movement and access to sensitive systems.

Identity and access

Authentication weaknesses, legacy protocols, credential exposure and paths to administrative access.

Remediation retesting

Targeted retests after you apply fixes, confirming each finding is resolved.

What you receive

Executive summary in plain English
Risk-rated findings with evidence and reproduction steps
Practical remediation guidance for each finding
A retest of fixed findings, with how each fix was verified
Your report in the client portal and as an editable Word document

How an engagement works

1
Scoping call
A confidential conversation about your environment, goals, constraints and timing. You get a tailored quote with a defined scope.
2
Signed authorisation
Nothing is tested until your authorised representative signs the rules of engagement, naming every in-scope target, the techniques allowed and anything excluded.
3
Authorised testing
Testing stays inside the signed scope. Out-of-scope addresses are refused by the platform itself, and every action is recorded in a tamper-evident log.
4
Reviewed findings
Each finding is risk-rated with evidence and practical remediation steps, and reviewed before it is released to you.
5
Fix and retest
We help your team prioritise, then retest fixed findings so you have evidence for auditors, insurers and clients.

Common questions

Will testing disrupt our systems?

Testing is planned around your operations. Denial-of-service or destructive techniques are only used if you specifically authorise them in writing.

What do you need from us?

A scoping call, a named authorised representative to sign the rules of engagement, the targets in scope and a point of contact during testing.

Can you test remotely?

Yes. Most external and many internal engagements are delivered remotely across Australia.