Option 1: Authenticated Vulnerability Assessment

Approach:

Key Deliverables:

Evaluate internal security exposure using limited internal access through VPN. This service is offered for both Core sites and Satellite sites.

• Identify internal assets reachable over VPN.

• Review firewall rules, internal routing, and endpoint exposure.

• Check OS patches, service configurations, and privilege escalation paths.

• Validate internal attack vectors through exploitation simulation.

• Include internal threat landscape and risk-based remediation.

• Vulnerability Report

• Exploitation Report

• Executive Summary with Recommendations

Option 2: Black Box Vulnerability Assessment

Approach:

Key Deliverables:

Simulate an external attacker with no prior knowledge of the internal environment. This service is offered for both Core sites and Satellite sites.

• DNS Enumeration, WHOIS, OSINT, and Banner Grabbing.

• Identify open ports, services, and version-specific vulnerabilities.

• Validate false positives, confirm exploit feasibility.

• Attempt limited proof-of-concept exploitation to validate critical vulnerabilities.

• Detailed technical and management-level reporting.

• Vulnerability Report

• Exploitation Report

• Executive Summary with Recommendations