Internal Network Penetration Testing

Internal network pen tests may take as little time as 1 week for small environments, but they can also take 4 or more weeks for large environments.

You can expect to pay no less than $14,500 for an internal network penetration test with us, though the number of physical locations and hosts always determines the final price.

Yes, we ask that you inform your security team. A penetration test is a collaborative effort. Additionally, we ask that you inform them to not impede or block any ongoing attack scenarios. After all, we’re here to help you by identifying vulnerabilities and exploiting them to show real-world impact. This will also provide you with the maximum value from this assessment.

Generally speaking, “Denial of Service” (DoS) testing is not in-scope for any network assessment. It is possible for a service or application to react negatively if specific vulnerabilities are exploited. This could cause a loss of availability depending on various factors. If this does happen, please notify our team and we’ll coordinate with you to determine the root cause.

While it’s a great added benefit to know that your logging and monitoring is working as intended, uniformity it does not result in a “passing” grade. There really is no pass or fail, the goal of a penetration test is to help strengthen weaknesses within your network. If there were no findings identified, you may want to expand the scope of your engagement.

For most compliance focused assessments, testing against production is a strict requirement. In general, we recommend testing against production; however, if there is no compliance framework involved, the choice is yours.