Key Benefits
What We Do
How It Helps Your Business
What We Assess
Network topology, segmentation design, DMZ configuration, trust zone mapping, and traffic flow analysis
Firewall rule review, IDS/IPS configuration, exposed services, port scanning, and external attack surface mapping
VLAN configuration, inter-VLAN routing controls, microsegmentation, and lateral movement paths
Router and switch hardening, management access controls, firmware versions, SNMP configuration
Wi-Fi authentication, encryption standards, rogue AP detection, guest network isolation
VPN configuration, split tunnelling, MFA enforcement, remote desktop exposure
SIEM integration, NetFlow logging, alerting coverage, and traffic baseline review
DNS security extensions, internal DNS hygiene, DHCP snooping, and rogue server risk
Our Process
We map your network topology, identify all in-scope devices, and agree assessment boundaries with your team.
Analysis of network design documents, firewall policies, segmentation diagrams, and change records to identify design-level weaknesses.
Credentialed and uncredentialed scanning of network devices, services, and traffic flows across the defined scope.
Review of firewall ruleset, router ACLs, switch configurations, and network management plane settings against CIS benchmarks.
Review of NetFlow data, DNS query logs, and monitoring system alerts to identify anomalous patterns and coverage gaps.
All findings are rated by severity and exploitability. A full technical report and executive summary are delivered with a prioritised remediation plan.
Frequently Asked Questions
Will the assessment affect our network performance?
We schedule active scanning during off-peak hours and use scan profiles that minimise bandwidth and device load. Network performance impact is negligible
Do you need administrative access to our devices?
Credentialed assessment provides deeper insight into device configurations. We work with your team to establish read-only access through a secure, audited process.
How often should a network security assessment be conducted?
We recommend a full assessment annually and after any major network changes — such as acquisitions, new site additions, or significant infrastructure upgrades

