External exposure assessment

We begin with a scoping call to learn about your organization and confirm the in-scope assets that will be included in the assessment.

A Statement of Work (SOW), Master Service Agreement (MSA), and formal Rules of Engagement (ROE) document are then established, outlining:

• Approved scope and exclusions

• Testing windows

• Deliverables

• Legal authorization to perform testing

All testing is performed strictly within the approved scope.

We use manual and automated methods to discover assets that may be accessible externally, including but not limited to:

• Publicly exposed systems, services, and endpoints

• Subdomains, domains, and associated infrastructure

• Login portals, administrative interfaces, and other access points

• Publicly accessible files, directories, and sensitive information
  
  

Discovered assets and findings are manually reviewed and validated to confirm their accuracy and security impact. 

Common findings can include:

• Security misconfigurations

• Exposed credentials, secrets, or sensitive information

• Vulnerable and/or outdated technologies

• Exposed access to administrative interfaces or services

• Information that could help an attacker map your organization's attack surface.

We keep you informed throughout the engagement, including a pre-test notification, real-time escalation of any critical findings, and confirmation once testing concludes. 

Once testing is complete, we provide a detailed report which includes:

• An executive summary for business and non-technical stakeholders

• A technical breakdown of each identified finding

• Severity ratings based on potential business impact

• Remediation guidance

• Retesting upon request to verify remediation of identified vulnerabilities
  
  

The final report is securely delivered followed by a debrief where we walk you through the findings and answer any questions.