External Penetration Testing for Your Business
External penetration testing services look at your company the way an outsider does, with no passwords and no inside knowledge. Omeiro scans public IP ranges, forgotten subdomains, VPN gateways, unpatched firewalls and leaked cloud storage buckets, then checks which findings are really exploitable.
What external penetration testing looks at
The main areas we check, by hand with tools as support. The exact scope depends on your package and is agreed in writing before work starts.
Open services
- Open ports and services
- Old or unpatched versions
- Remote access
Logins
- Default passwords
- Weak password rules
- Shared admin accounts
Firewall and segments
- Rules that allow too much
- Flat networks
- Guest network access
Servers and devices
- Missing updates
- Exposed admin panels
- Unneeded features
Checklist Based on common risks and good practice. The exact scope depends on your package and is agreed in writing before work starts.
What you get with external penetration testing
Comprehensive black-box reconnaissance scanning exposed public IP blocks, neglected subdomains, unpatched firewalls, VPN gateways, and leaked cloud storage buckets.
Basic Package
Up to 5 public IPs / domains scanned; report. 3-day delivery, 2 revisions.
Standard Package
Up to 20 IPs / domains; manual verification. 5-day delivery, 2 revisions.
Premium Package
Up to 60 IPs / domains; attack surface map; retest. 8-day delivery, 2 revisions.
Clear brief first
We confirm what you need before work starts, so the scope is clear on both sides.
Revisions listed
Each package shows its revision rounds. A round is one list of changes sent together.
Yours once paid
Copyright of the final work passes to you once the order is paid in full.
Work starts only after the scope is agreed in writing and you confirm you own or control the systems involved.
How our external penetration testing works
Confirm scope
You authorise the addresses and domains we may test.
Discover assets
We find live hosts, subdomains and exposed services.
Test and verify
Findings are checked by hand, where your tier includes it, to weed out false alarms.
Report
You receive ranked findings and fix advice, with a retest on Premium.
External penetration testing: agreeing scope and reading results
External penetration testing begins with agreeing what counts as yours. Domains, IP ranges, cloud-hosted servers and VPN endpoints go into a scope document, and anything run by a third party, such as a hosting provider's shared infrastructure, may need their permission. Send your current IP and domain lists plus any addresses that must not be touched. We also ask about testing windows and an emergency contact, so unexpected behaviour can be stopped quickly.
Findings are only useful when ranked sensibly. A forgotten test server with a default login matters more than a dozen informational banner notes. Good external penetration testing explains each issue in plain terms, shows evidence, rates severity by real exploitability and states a fix. Many teams follow it with attack surface monitoring so new exposures are noticed between tests, and with internal testing to see what an intruder could reach after getting past the perimeter.
In short
- Delivery in 3 to 8 days, by package.
- Fixed price, shown before you order.
- IT managers who need an external network pentest for a customer or audit.
- Copyright yours after full payment.
External Penetration Testing: common questions
How much does external penetration testing cost?
Prices are fixed and shown by package on our External Penetration Testing pricing page, so you see the full price before you order. You can also ask for a custom quote.
How long does external network pentest take?
Delivery depends on the package: Basic 3-day delivery; Standard 5-day delivery; Premium 8-day delivery.
What is included in the Basic Package?
The Basic Package includes: Up to 5 public IPs / domains scanned; report. Higher packages add more scope, revisions and support.
Can I get a custom perimeter security assessment package?
Yes. If none of the packages fits, use the custom package form on our pricing page to describe what you need, and our team sends you a fixed price.
Will the test take my site down?
We avoid disruptive techniques and agree test windows with you beforehand.
Do you need credentials?
No, an external test starts with no access, just like an attacker.
What is the difference between a scan and a pentest?
A scan lists possible issues, while a pentest tries to confirm which ones can be used.
Do I need a retest?
A retest after fixes proves the problems are closed, and Premium includes one.
How often should external penetration testing be done?
At least once a year and after major changes such as new internet-facing systems, migrations or acquisitions. Some compliance frameworks set their own minimum frequency.
Who owns the final work?
Copyright of the final work passes to you once the order is paid in full. Paid fonts, stock files or licences, if used, are licensed in your name.
Ready to start your external penetration testing?
Compare the packages and pick the one that fits. Not sure which? Write to us and we will help you choose.