External perimeter assessment, internal lateral movement, segmentation validation, and Active Directory abuse paths, the same tradecraft real intruders use.
We assess your network from the outside in and the inside out. External perimeter, internal lateral movement, segmentation validation, and the Active Directory attack paths that turn one foothold into domain dominance.
Kerberos abuse, NTLM relays, GPO escalation, BloodHound graphs. We use the real tradecraft, then hand you the map and the fixes.
An optional assumed-breach scenario starts us with workstation-level access, modelling exactly what a phished employee gets an attacker to.
Define ranges, rules, and whether to include an assumed-breach start.
Perimeter testing, internal lateral movement, AD path discovery.
Segmentation matrix and BloodHound graph of what reached what.
Prioritized fixes and verification of remediations.
Multi-vector adversarial simulation against your people, processes, and technology.
View service →S/02Manual penetration testing augmented by Cignify/Web.
View service →S/06Gap analysis, control design, evidence collection, and audit-ready documentation against the frameworks the Saudi market actually runs on.
View service →External perimeter assessment, internal lateral movement, segmentation validation, and the Active Directory attack paths (Kerberos abuse, NTLM relays, GPO escalation) that turn one foothold into domain dominance.
An optional scenario that starts the test with workstation-level access, modelling exactly what a phished employee hands an attacker.
One to four weeks, depending on scope and the vectors in play.
External and internal findings reports, an Active Directory attack-path graph (BloodHound export), a segmentation matrix of what reached what, a prioritized hardening playbook, and an executive risk summary.
Yes. The engagement includes verification of remediations after hardening.