An internal infrastructure penetration test will assess your critical internal networks to identify security vulnerabilities and weaknesses. These are the networks used by your staff to handle and store sensitive data.

It is aimed at assessing internal networks from the position of an attacker physically connected to the network. This can also simulate risk relating to a compromised employee or even a malicious insider.

Even if your organisation has no publicly facing infrastructure, you may find that end user devices such as laptops still have access to email / internet and outbound communications.

If an attacker is able to successfully compromise an end user device through one of these vectors, they may subsequently have full access to the internal environment.

An internal infrastructure penetration test will cover the following areas at the very least:

• Patching
• Secure Configurations
• Active Directory Security Controls
• Password Management
• Permissions
• Network Segmentation
• Detection and Alerting

Ruptura InfoSecurity have a variety of options to perform an internal infrastructure penetration test. This can be performed physically onsite, utilise an existing VPN solution or deploy a ‘jumpbox’ into the environment.

This all depends on the exact architecture of the network and specific requirements.

Our infrastructure penetration testing is performed by a team of highly certified testers that have the necessary skills needed to find vulnerabilities in a controlled and approved manner.

We have a team purely dedicated to assessing both internal and external infrastructure.

If this is previously agreed, Ruptura InfoSecurity will assist in all remediation activities to assist in fixing identified security vulnerabilities.

This will take place alongside existing security engineering and architecture teams.