External Network Penetration Testing

External network pen tests may take as little time as 1 week for small environments, but they can also take 4 or more weeks for large environments. Your estimated timeline will directly correlate to the total number of hosts in scope.

You can expect to pay no less than $14,500 for an external network penetration test with us, though the scope of your assessment always determines the final price. 

To adequately assess your network’s security, we ask that these be disabled. All penetration tests are timeboxed assessments. This means that the time spent bypassing these controls, weren’t spend looking for vulnerabilities within your application or hosts themselves. Additionally, for organizations seeking FedRAMP accreditation, it is a requirement. We will provide you with our public IP addresses so that we can be allowed inbound.

While we do perform reconnaissance to identify hosts Internet-facing, we (or any third-party assessor) cannot guarantee all will be found. Discovery performed by a third-party will never be as good as the “true list” from your network administrators. Consider working with them to identify all known external IP addresses and DNS records of hosts within your local network or cloud provider.

Your external network assets are most likely under attack 24/7 from unauthorized threat actors. However, if host availability would be particularly sensitive during the test, we can accommodate non-business hours testing for automated scanning activities.