Infrastructure Pentest - Baseline

Fixed price. Fixed scope. No sales call. A manual penetration test of your external attack surface: the right starting point for a first compliance-driven pentest.

Scope included

• Up to 16 live IP addresses or hostnames (external, internet-facing)
• Estimated effort: 4 tester-days

What we test

• Service discovery and fingerprinting across all TCP ports and common UDP ports
• Manual validation and exploitation of vulnerabilities, no raw scanner output
• Exposed admin interfaces, weak or default credentials, outdated software
• TLS/SSH configuration and email security (SPF/DKIM/DMARC)

Deliverables

• PDF report with executive summary and technical findings (CVSS-scored, with remediation advice)
• Letter of attestation you can share with auditors and customers
• Critical findings reported to you immediately, not at the end of the test

Not included

• Retest of findings: add a Separate Retest ($1,499), or choose Extended/Comprehensive where a free retest is included
• Internal network testing, Active Directory, cloud configuration review
• Web application logic testing (see Web Application Pentest)
• Social engineering / phishing, denial-of-service, physical testing

If we discover during kick-off that your environment is larger than this tier, you can upgrade for the price difference or get a full refund, your choice.