Skip to main content

External Infrastructure Penetration Test

The services, logins and forgotten systems an attacker sees from outside, and which of them is a way in.

Book a Scoping Call

We find the services, logins and forgotten systems an attacker sees from outside, then test them for weaknesses that give a way in. You get a prioritised fix list your IT team or provider can act on, and a summary your customers, insurer or auditor will accept.

Who it is for

  • Organisations asked to evidence external testing for a customer questionnaire, insurance application or supply-chain requirement.
  • Businesses that want to know what they expose to the internet and whether any of it is a way in.
  • IT managers and managed service providers who want an independent check of a perimeter they run.

Scope bands

Fixed scope, fixed fee. Answer four questions, receive a fixed-fee quote, and nothing changes once work starts. Larger or more complex requirements are scoped as a Bespoke engagement, still at a fixed fee agreed before work begins.

Live IP addresses

Focused
Up to 16
Core
Up to 64
Extended
Up to 256

Services or websites

Focused
Up to 10
Core
Up to 25
Extended
Up to 50

Public websites or portals

Focused
Up to 2
Core
Up to 5
Extended
Up to 10

Self-run VPN or gateway

Focused
No
Core
Yes
Extended
Yes

Your highest answer sets the band. One answer in Extended places the engagement in Extended, whatever the other three are.

Not sure of your address count? We can confirm it with you from your domains before quoting.

Bespoke

Larger estates or many web applications.

Included with every Enhanced package

  • Full technical report: every finding with severity, business impact, evidence and remediation guidance.
  • Letter of attestation: a forwardable summary for the customer, insurer, investor or auditor who asked for the test.
  • 60-minute debrief for technical and business stakeholders.
  • One retest within 30 days, with a retest report.
  • Immediate escalation of any critical issue found during testing, not held until the report.
  • Independent quality review of every report by a second senior practitioner before issue.

Also included with this package

  • Exposure map of what you present to the internet, including anything forgotten.
  • Prioritised remediation plan.

How it works

  1. 01Answer the four scoping questions.
  2. 02Receive a fixed-fee quote.
  3. 03Sign authorisation and set up access (some packages include an access guide).
  4. 04We test, issue the report within five business days, run the debrief and complete the retest.

Good to know

Testing uses non-destructive techniques and every finding is manually verified.

Full testing of a web application is covered by the Web Application Penetration Test. View that service

Exploitability, not a scanner dump

  • Every finding is reproduced by hand before it reaches the report. Anything a tester cannot reproduce is discarded rather than passed on with a caveat.
  • Findings are rated by what an attacker could actually do with them in your environment, not by the raw score a tool assigned.
  • Where a route exists from a starting foothold to something that matters, we show the route rather than listing the steps as separate findings.
  • Every report is independently quality reviewed by a second senior practitioner before it is issued.

Who tests

Testing is led by a UK Cyber Security Council Principal practitioner (Security Testing) holding CREST CRT, OSCP, OSEP and CyberScheme Team Leader. Every report is independently quality reviewed by a second senior practitioner before issue. Our founders bring over ten years each in UK defence and critical national infrastructure. Tarian Labs is Cyber Essentials certified and based in South Wales.

Fixed scope, fixed fee, agreed before work starts.

A short call with a practitioner is enough to size this accurately.

Book a Scoping Call