Infrastructure Pentest - Comprehensive

Fixed price. Fixed scope. No sales call. Our broadest infrastructure test: a larger perimeter plus an internal assessment that includes an Active Directory attack-path review.

Scope included

• Up to 80 external IP addresses or hostnames
• Internal network test of up to 2 subnets (/24) via VPN or a lightweight testing VM we provide
• Active Directory review (one domain)
• Estimated effort: 7 tester-days

What we test

• Everything in Extended, plus:
• Active Directory attack paths: Kerberoasting, delegation abuse, ACL misconfigurations, AD CS
• Segmentation testing between the two in-scope subnets
• Password policy and credential-reuse analysis

Deliverables

• PDF report with executive summary and technical findings (CVSS-scored, with remediation advice)
• 1 free retest within 90 days of the final report: we verify your fixes and issue an updated report
• Letter of attestation you can share with auditors and customers
• Critical findings reported to you immediately, not at the end of the test

Not included

• Cloud configuration review, web application logic testing
• Social engineering / phishing, denial-of-service, physical testing

Larger than this? Combine tiers, or email us and we'll reply with a fixed price, not a sales call.