Asset discovery
Domains, subdomains, addresses and services associated with the scope.
External infrastructure
Understand what your company exposes to anyone watching from the internet.
External infrastructure penetration testing for domains, services, VPNs and internet-facing assets, with validation and risk prioritization.
External surface Services and configuration Prioritized by impact
When this matters
The published surface changes faster than the inventory.
Forgotten domains, legacy services and weak configuration can open entry paths outside the systems everyone is watching.
01
New domains and environments
02
VPNs and remote access
03
Assets inherited from mergers or migrations
04
Periodic review of exposure
Coverage
What we look at from the outside.
Only formally authorized assets enter the assessment.
Published services
Versions, protocols, panels, VPNs and exposed administrative interfaces.
Configuration
TLS, headers, authentication, information disclosure and access controls.
Attack paths
Combinations of conditions that raise the likelihood or the impact of exploitation.
Inside the delivery
See how this work takes shape.
From technical alignment to delivery, the work has to leave context, evidence and next steps visible to everyone involved.
01 / 04
Process
Controlled reconnaissance, validation and documentation.
Execution respects the operational limits agreed with your company.
Scope and rules of engagement
We document assets, access, limits, execution window and owners before any activity starts.
Guided assessment
Vorvex specialists carry out the work, with Apex supporting reconnaissance, correlation and evidence handling.
Validation and prioritization
Findings are analyzed for exploitability, technical impact and consequence for the business.
Report and retest
We deliver reproducible evidence and recommendations and, when contracted, validate the fixes you applied.
Deliverables
An inventory of risk, not just of open ports.
The delivery separates informational exposure, vulnerable condition and validated risk.
Executive view of risk
Exposure summary, priority impacts and next steps to support decisions and investment.
Evidence to fix with
Technical detail, context, reproduction steps and practical remediation guidance.
Traceable record
Scope, period, methodology and finding status documented for audit and accountability.
Frequently asked questions
Straight answers to help you plan the assessment.
If your question isn't here, talk to the team directly.
Ask on WhatsAppDoes the test find unknown assets?+
Reconnaissance can identify assets related to the scope, but any active validation stays limited to what was formally authorized.
Can VPN and remote access be included?+
Yes, as long as the service and the testing rules are described in the scope.
Do you run denial-of-service attacks?+
Destructive or availability testing is not part of the standard scope and requires specific analysis and authorization.
Next step
Want to validate your external exposure?
Send the domains, IP ranges and known services so we can assess the scope.