{"title":"Infrastructure Pentests","description":"\u003cp\u003eFixed-price manual penetration tests for external and internal networks, including Active Directory. Three tiers, scope written down, no sales call.\u003c\/p\u003e","products":[{"product_id":"infrastructure-pentest-baseline","title":"Infrastructure Pentest - Baseline","description":"\u003cp\u003e\u003cstrong\u003eFixed price. Fixed scope. No sales call.\u003c\/strong\u003e A manual penetration test of your external attack surface: the right starting point for a first compliance-driven pentest.\u003c\/p\u003e\n\u003ch3\u003eScope included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUp to 16 live IP addresses or hostnames (external, internet-facing)\u003c\/li\u003e\n\u003cli\u003eEstimated effort: 4 tester-days\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWhat we test\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eService discovery and fingerprinting across all TCP ports and common UDP ports\u003c\/li\u003e\n\u003cli\u003eManual validation and exploitation of vulnerabilities, no raw scanner output\u003c\/li\u003e\n\u003cli\u003eExposed admin interfaces, weak or default credentials, outdated software\u003c\/li\u003e\n\u003cli\u003eTLS\/SSH configuration and email security (SPF\/DKIM\/DMARC)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eDeliverables\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePDF report with executive summary and technical findings (CVSS-scored, with remediation advice)\u003c\/li\u003e\n\u003cli\u003eLetter of attestation you can share with auditors and customers\u003c\/li\u003e\n\u003cli\u003eCritical findings reported to you immediately, not at the end of the test\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eNot included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRetest of findings: add a \u003ca href=\"\/products\/retest-fix-verification\"\u003eSeparate Retest ($1,499)\u003c\/a\u003e, or choose Extended\/Comprehensive where a free retest is included\u003c\/li\u003e\n\u003cli\u003eInternal network testing, Active Directory, cloud configuration review\u003c\/li\u003e\n\u003cli\u003eWeb application logic testing (see Web Application Pentest)\u003c\/li\u003e\n\u003cli\u003eSocial engineering \/ phishing, denial-of-service, physical testing\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003eIf we discover during kick-off that your environment is larger than this tier, you can upgrade for the price difference or get a full refund, your choice.\u003c\/em\u003e\u003c\/p\u003e","brand":"fasttrack pentest","offers":[{"title":"Default Title","offer_id":64701196239225,"sku":"FT-INF-T1","price":4899.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1039\/6100\/2361\/files\/ft2-infra-1.svg?v=1790334620"},{"product_id":"infrastructure-pentest-extended","title":"Infrastructure Pentest - Extended","description":"\u003cp\u003e\u003cstrong\u003eFixed price. Fixed scope. No sales call.\u003c\/strong\u003e External and internal network testing for organisations that need to show their auditor both the perimeter and what an attacker could reach from inside.\u003c\/p\u003e\n\u003ch3\u003eScope included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUp to 32 external IP addresses or hostnames\u003c\/li\u003e\n\u003cli\u003eInternal network test of up to 1 subnet (\/24) via VPN or a lightweight testing VM we provide\u003c\/li\u003e\n\u003cli\u003eEstimated effort: 6 tester-days\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWhat we test\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEverything in Baseline, plus:\u003c\/li\u003e\n\u003cli\u003eInternal service exposure, network segmentation between the tested subnet and sensitive zones\u003c\/li\u003e\n\u003cli\u003eCredential attacks, lateral movement and privilege escalation paths\u003c\/li\u003e\n\u003cli\u003eActive Directory misconfigurations visible from the tested subnet\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eDeliverables\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePDF report with executive summary and technical findings (CVSS-scored, with remediation advice)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e1 free retest within 45 days\u003c\/strong\u003e of the final report: we verify your fixes and issue an updated report\u003c\/li\u003e\n\u003cli\u003eLetter of attestation you can share with auditors and customers\u003c\/li\u003e\n\u003cli\u003eCritical findings reported to you immediately, not at the end of the test\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eNot included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCloud configuration review, web application logic testing\u003c\/li\u003e\n\u003cli\u003eSocial engineering \/ phishing, denial-of-service, physical testing\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003eIf we discover during kick-off that your environment is larger than this tier, you can upgrade for the price difference or get a full refund, your choice.\u003c\/em\u003e\u003c\/p\u003e","brand":"fasttrack pentest","offers":[{"title":"Default Title","offer_id":64701197287801,"sku":"FT-INF-T2","price":7199.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1039\/6100\/2361\/files\/ft2-infra-2.svg?v=1790334621"},{"product_id":"infrastructure-pentest-comprehensive","title":"Infrastructure Pentest - Comprehensive","description":"\u003cp\u003e\u003cstrong\u003eFixed price. Fixed scope. No sales call.\u003c\/strong\u003e Our broadest infrastructure test: a larger perimeter plus an internal assessment that includes an Active Directory attack-path review.\u003c\/p\u003e\n\u003ch3\u003eScope included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUp to 80 external IP addresses or hostnames\u003c\/li\u003e\n\u003cli\u003eInternal network test of up to 2 subnets (\/24) via VPN or a lightweight testing VM we provide\u003c\/li\u003e\n\u003cli\u003eActive Directory review (one domain)\u003c\/li\u003e\n\u003cli\u003eEstimated effort: 7 tester-days\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eWhat we test\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEverything in Extended, plus:\u003c\/li\u003e\n\u003cli\u003eActive Directory attack paths: Kerberoasting, delegation abuse, ACL misconfigurations, AD CS\u003c\/li\u003e\n\u003cli\u003eSegmentation testing between the two in-scope subnets\u003c\/li\u003e\n\u003cli\u003ePassword policy and credential-reuse analysis\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eDeliverables\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePDF report with executive summary and technical findings (CVSS-scored, with remediation advice)\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e1 free retest within 90 days\u003c\/strong\u003e of the final report: we verify your fixes and issue an updated report\u003c\/li\u003e\n\u003cli\u003eLetter of attestation you can share with auditors and customers\u003c\/li\u003e\n\u003cli\u003eCritical findings reported to you immediately, not at the end of the test\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch3\u003eNot included\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCloud configuration review, web application logic testing\u003c\/li\u003e\n\u003cli\u003eSocial engineering \/ phishing, denial-of-service, physical testing\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003eLarger than this? Combine tiers, or email us and we'll reply with a fixed price, not a sales call.\u003c\/em\u003e\u003c\/p\u003e","brand":"fasttrack pentest","offers":[{"title":"Default Title","offer_id":64701198270841,"sku":"FT-INF-T3","price":8699.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1039\/6100\/2361\/files\/ft2-infra-3.svg?v=1790334622"}],"url":"https:\/\/fasttrackpentest.com\/collections\/infrastructure-pentests.oembed","provider":"fasttrack pentest","version":"1.0","type":"link"}