// What it covers
The scope of the work.
01Exposed service discovery
02Perimeter misconfiguration
03VPN & remote access
04Email security (SPF / DKIM / DMARC)
05TLS & certificates
06Default & weak credentials
07Known vulnerabilities
08Public data leakage (OSINT)
// What we need from you
The basics below — everything else is worked out together in the free scoping call.
▸Public IP ranges and domains in scope
▸Confirmation you are authorised to test them
▸Hosting-provider notice, if needed
▸A contact for any disruption
// What you receive
A ranked view of your internet-facing attack surface and how to close each exposure.
Plus an executive summary for leadership and a retest of every fixed finding.
// How it runs
STEP 01ScopeFree call to agree targets, approach and timeline.
STEP 02TestManual-first testing. Critical issues flagged straight away.
STEP 03ReportPrioritised findings with clear, practical fixes.
STEP 04RetestYou fix, we verify and close each finding.
// More red team services