Network pentest

Network penetration testing, from the internet to your servers.

I look at what an attacker sees from the internet, then at what they could reach once inside your office network or VPN: servers, Active Directory, file shares and backups.

The goal is simple: show how far an intruder could get, and how to stop them earlier.

Book a free 30-min callWhat I test
At a glance
Scope
External · Internal · VPN
Focus
Exposure · Active Directory
Format
Remote, or on-site in France
Deliverable
Report, debrief and retest
01 / Scope

What I test

External, internal or both, depending on where your real risk sits.

External exposure

Every service visible from the internet: forgotten subdomains, remote access, mail servers, admin interfaces left open.

Remote access and VPN

VPN gateways, remote desktop and firewall configuration, often the first door attackers try.

Active Directory

Weak passwords, risky permissions, Kerberos and delegation issues: the usual road to domain admin.

Lateral movement

Segmentation, shared credentials, file shares and backups reachable from a standard workstation.

02 / Method

How a network pentest runs

Every step is agreed in writing before it starts.

  1. Scoping. IP ranges, sites, test windows and emergency contacts, agreed in writing.
  2. External test. Discovery of everything you expose on the internet, then controlled exploitation of what is vulnerable.
  3. Internal test. Starting from a standard workstation or VPN access, as a compromised employee laptop would.
  4. Report. Attack paths explained step by step, findings ranked by risk, fixes prioritised for your IT team or provider.
  5. Debrief and retest. We review the results together, then I verify the fixes.
03 / Typical findings

What usually lets attackers in

Most internal compromises chain a few simple weaknesses.

Forgotten exposed services

An old test server, a remote desktop port or an admin page nobody remembers publishing.

Weak or reused passwords

Service accounts with passwords that never change, or the same local admin password on every machine.

Flat network

Every workstation can reach every server, including backups and management interfaces.

Unpatched systems

Servers and network devices missing security updates for publicly known, actively exploited flaws.

04 / FAQ

Network pentest: your questions

Do you need to come on site?

Not necessarily. The internal test can run remotely through a VPN access or a virtual machine you provide. On-site testing in France is also possible.

Will the test disrupt our network?

Tests are scheduled with you and avoid techniques that could cause outages. Anything risky is discussed before it is used.

Internal or external: where should we start?

If you are unsure what you expose on the internet, start external. If you worry about a phishing victim or a stolen laptop, the internal test shows the real impact.

Is this the same as a vulnerability scan?

No. A scan lists potential issues. A pentest proves which ones are exploitable, how they chain together, and what an attacker could really reach.

Want to know how far an intruder could get?

Tell me about your sites, servers and remote access. You get a fixed-price proposal after a free 30-minute call.

Book a free callAll services