Exposed services
Ports and services reachable from outside that should not be.
home / services
service · infrastructure
Network and infrastructure penetration testing, external and internal
Exposed services, versions, TLS configuration and segmentation. Internal testing needs VPN access or a jump host.
what it covers
What we check in the infrastructure.
Versions and patches
Outdated software with known vulnerabilities.
TLS and ciphers
Weak protocols and ciphers, invalid certificates.
Default credentials
Factory accounts still active.
Segmentation
Networks that can reach each other when they should not.
Remote access
VPN, RDP and SSH with weak configurations.
how we work
A fixed method, with a person at the end.
Inventory
The scope is a signed list of addresses and ranges.
Controlled scan
We check services and versions within the agreed limits.
Hypotheses
For each service found, the plan proposes the next checks.
Review
A person confirms each vulnerability and assigns the severity.
Report
Service, version, risk and fix.
included and not included
What you receive, and what is not in the service.
Included
- Report per address and service
- Reproducible proofs
- Severity assigned by a person
- Fix for every confirmed vulnerability
Not included
- Testing without a signed authorisation
- Denial-of-service testing
- Social engineering or physical attacks
- Testing of third-party systems
- Scans outside the signed ranges
service sheet
To get started.
| Item | Detail |
|---|---|
| Type of test | External or internal, with signed ranges |
| To start, we need | Signed addresses or ranges; for internal, VPN or a jump host |
| Delivery | Report, service list, log |
| Price | from €1,000 to €2,500 per range |
Want an infrastructure test?
We reply by hand with a written proposal.