Internal Network Penetration Test

$6,500.00

Assumed-breach testing inside the LAN: Active Directory attack paths, lateral movement and the road to domain admin.

Starting from the position of an attacker who already has a foothold — a phished laptop, a rogue device, a compromised contractor — we map how far that access can be extended across your internal network.

What the engagement covers

Active Directory enumeration and attack-path analysis
Credential harvesting, relaying and Kerberos attacks
Lateral movement and privilege escalation
Segmentation and internal exposure testing
Domain and enterprise administrator escalation attempts

What you receive

Full attack-path narrative from foothold to domain compromise
Prioritised hardening plan for Active Directory
Detection gap notes for your monitoring team
Live debrief and remediation Q&A
Free retest of all findings within 30 days

Typical duration: 8 to 12 business days
Pricing: the listed figure is a starting point; final price follows a scoping call and depends on the size of the environment.
Authorisation: testing begins only once a scope and authorisation letter is signed by an accountable owner of the systems in scope.

Request a scoping call