External exposure
Internet-facing services, remote access and reachable management interfaces.
Network penetration testing
Find the path from reachable service to sensitive system.
External and internal testing with explicit host ranges and segmentation goals.
From A$4,500 ex GST for up to 16 live external IPs. Internal testing from A$7,500 ex GST, remote via VPN.
Internal network testing is delivered remote via VPN only. On-site requests go to written scope review.
Manually verified findings.
- OSCP-certified testers
- Written testing boundaries
- Actionable remediation
What we test
A scope with a purpose.
Internal attack paths
Service weaknesses and controlled lateral movement from an agreed start point.
Segmentation
Whether the named boundaries actually separate users and sensitive systems.
What we need from you
- IP ranges and who owns them.
- External or internal access requirements.
- Critical systems and maintenance restrictions.
- For internal work: a test connection and a named escalation contact.
What you can act on
- A map of validated paths and affected hosts.
- Starting access and business impact per path.
- Exposure reduction priorities for infrastructure owners.
Reporting and retest terms are agreed in writing. The record separates verified fixes from outstanding work.
Limits matter
What this test does not cover
- Wireless, physical access and social engineering.
- Denial of service.
- Unapproved third-party infrastructure.
- Internal segmentation proof from an external test.
The deliverable
See what you will receive
A 19-page illustrative report built from synthetic findings, not a client report. It shows scope, evidence, severity rationale and the retest record.
Questions before you book
Practical answers.
External, internal or both?
External testing starts outside your network. Internal testing starts from an agreed level of access inside it. Choose based on the threat you need to assess. One does not replace the other.
What does a penetration test cost?
From A$7,500 ex GST for one web application with its API and two user roles. That covers five testing days, the report and a retest of critical and high findings. More applications, endpoints or cloud accounts give an indicative range. The price is fixed once scope is agreed, in writing, before work starts.
How long will it take?
Testing effort and elapsed delivery time are different. We agree both after reviewing the scope, access readiness and your deadline. Leave time for remediation and a focused retest.
Ready to price your test?
The sample report is illustrative, built from synthetic findings. It is not a client report.
Last reviewed: