Test your attack surface from a hacker's perspective
In an external penetration test, we analyze your internet-exposed systems and services from the perspective of an external attacker. The goal is to identify and exploit vulnerabilities before a real attacker does.
An external penetration test simulates a realistic attack on your internet-facing systems. Our specialists proceed just like a real attacker: we first identify all exposed services and systems, analyze their configuration, and systematically search for exploitable vulnerabilities. Unlike an automated vulnerability scan, we rely on manual techniques to uncover complex attack paths and logical flaws.
Every organization with an internet presence has an external attack surface. Whether web servers, VPN gateways, email systems, or cloud services -- every exposed service is a potential entry point for attackers. An external pentest shows you which vulnerabilities are actually exploitable and what risk they pose to your organization.
Regular external penetration tests are also an important foundation for meeting regulatory requirements such as the revDSG, ISO 27001, or industry-specific standards. You receive not only an overview of your current security posture but also concrete recommendations for improving your external defenses.
Defining the test scope and identifying all exposed systems, services, and subdomains.
Targeted search for vulnerabilities through manual testing and specialized tools.
Controlled exploitation of discovered vulnerabilities to confirm the actual risk.
Detailed report with risk ratings, evidence, and recommendations, followed by a joint debrief of the findings.
Web applications, content management systems, and portals accessible from the internet.
VPN endpoints and remote access solutions for vulnerabilities and misconfigurations.
Mail server configuration, SPF, DKIM, DMARC, and protection against spoofing and phishing.
DNS zones, subdomains, zone transfers, and potential takeover of dangling DNS records.
Exposed cloud resources such as storage buckets, APIs, and management interfaces.
Citrix, RDP gateways, webmail, and other externally accessible login portals.
Anonymized engagement example
A Swiss trading company. 8 hosts. Access to the internal network within 24 hours.
All critical vulnerabilities closed within two weeks. Retest confirms: no external access to the internal network possible. The major client accepts the result.
A Swiss SME needs an external pentest because a major client requires it as a prerequisite for collaboration. Previous automated vulnerability scans found no critical issues.
A clear summary of the findings for executives and decision-makers, including an overall risk assessment and strategic recommendations.
Detailed documentation of every discovered vulnerability with evidence (screenshots, payloads), technical description, and steps to reproduce.
Each vulnerability is rated by severity (CVSS) and business risk, so you can prioritize remediation efforts.
Concrete, actionable recommendations for fixing each vulnerability, prioritized by risk and effort.