PTES
Engagement structure, intelligence gathering, threat modelling, validation, and reporting.
Penetration testing
Network Penetration Testing
A controlled assessment of network infrastructure exposed to the internet or used internally, performed within agreed testing windows and rules of engagement.
Assessment scope
What is tested
The final test coverage is agreed during scoping and limited to systems for which written authorization has been provided.
Public attack surface and exposed services
Network service configuration and patch exposure
Segmentation and trust boundaries
Authentication and administrative interfaces
Controlled privilege and lateral movement paths
Logging and defensive visibility
Engagement flow
Controlled from authorization to retest.
01
Scope & authorization
Define objectives, approved systems, constraints, test windows, contacts, and rules of engagement.
02
Discovery
Establish the authorized attack surface, architecture, user roles, assets, and applicable assessment criteria.
03
Controlled testing
Assess the approved scope using manual and technical methods appropriate to the environment.
04
Validation
Confirm findings safely, remove false positives, and establish practical technical and business impact.
05
Reporting
Receive findings supported by evidence, risk ratings, an executive summary, and remediation priorities.
06
Remediation review
Review proposed corrective actions and clarify implementation priorities with the assessment team.
07
Retest
Verify agreed fixes and record whether each tested finding has been resolved, reduced, or remains open.
Assessment references
Industry standards and guidance
NIST SP 800-115
Technical assessment planning, execution, analysis, and mitigation guidance.
CIS Controls
Context for safeguards affecting assets, access, configuration, logging, and network monitoring.
Standards guide scope and test coverage. An assessment does not itself constitute certification or guarantee compliance.
Reporting
What you receive
Executive summary and scope record
Technical findings supported by evidence
Ratings for risk and business impact
Prioritized remediation plan
Retest statement for agreed fixes
Define an appropriate test scope.
Discuss the systems, objectives, access level, and required evidence with DIGITPOL.