Penetration testing of external and internal networks, Active Directory, hybrid identity, wireless and remote access.
Testing what an internet attacker sees: reconnaissance, exposed services, VPN and mail gateways, web portals and cloud edges, within the annual external test that PCI DSS 11.4.3 and CIS 18.2 describe; covers scoping by IP range and timing.
Testing from a foothold inside the network for lateral movement, credential exposure, segmentation weaknesses and paths to critical systems, including PCI DSS segmentation testing; covers how access is provided and how production risk is managed.
A review of Active Directory configuration and attack paths: privileged groups, delegation, Kerberos settings, Group Policy, certificate services and tiering, compared with Microsoft's enterprise access model; differs from an internal test by covering configuration, not only exploitable paths.
On-site testing of Wi-Fi networks: encryption and authentication modes such as WPA3 and 802.1X, rogue and lookalike access points, guest network isolation and whether wireless access reaches internal or cardholder systems.
Testing VPN concentrators, remote desktop gateways and zero trust access tools for exposure, authentication and MFA weaknesses, patch level and what a connected device can reach once inside.
Assessment of Microsoft Entra ID tenants and their link to on-premises AD: Entra Connect or Cloud Sync servers as control plane assets, sync and sign-in methods, privileged roles, conditional access and app consent.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.