Protocol and authentication
WPA2 and WPA3 configuration, weak keys, enterprise authentication via 802.1X and legacy protocols that should be disabled.
Wireless network penetration testing
The office Wi-Fi is also a way into the internal environment.
Corporate wireless penetration testing: segmentation between guest and internal Wi-Fi, WPA2/WPA3 configuration, captive portals and resistance to rogue access points.
WPA2/WPA3 Network segmentation Executed on site
When this matters
Corporate Wi-Fi tends to fall outside traditional testing.
Application and external infrastructure tests rarely cover the office wireless network. Weak configuration, incomplete segmentation between guests and the internal network, or poorly built captive portals can offer a way in that no remote test would find.
01
Offices with corporate and guest Wi-Fi
02
Before network infrastructure changes
03
Environments with multiple branches
04
Periodic validation of segmentation
Coverage
What we assess on the wireless network.
Execution is usually on site, given the limited range of the radio signal.
Segmentation between networks
Effective isolation between guest Wi-Fi, the corporate network and critical environments, preventing VLAN hopping.
Captive portals
Resistance to authentication bypass, MAC spoofing and unauthorized access through the guest portal.
Rogue access point
How devices and users behave when faced with a fake access point impersonating the legitimate network.
Inside the delivery
See how this work takes shape.
From technical alignment to delivery, the work has to leave context, evidence and next steps visible to everyone involved.
01 / 04
Process
An assessment carried out within signal range.
The scope accounts for locations, schedules and operational limits agreed in advance.
Scope and rules of engagement
We document assets, access, limits, execution window and owners before any activity starts.
Guided assessment
Vorvex specialists carry out the work, with Apex supporting reconnaissance, correlation and evidence handling.
Validation and prioritization
Findings are analyzed for exploitability, technical impact and consequence for the business.
Report and retest
We deliver reproducible evidence and recommendations and, when contracted, validate the fixes you applied.
Deliverables
Priorities that consider the network environment as a whole.
The delivery separates configuration risk, segmentation risk and device behavior.
Executive view of risk
Exposure summary, priority impacts and next steps to support decisions and investment.
Evidence to fix with
Technical detail, context, reproduction steps and practical remediation guidance.
Traceable record
Scope, period, methodology and finding status documented for audit and accountability.
Frequently asked questions
Straight answers to help you plan the assessment.
If your question isn't here, talk to the team directly.
Ask on WhatsAppDoes the test require someone on site?+
Usually yes, since the assessment depends on radio signal range at the company's physical premises.
Can multiple branches be tested?+
Yes, as long as each location and its network are described in the authorized scope.
Does the test include physical social engineering?+
They are related but distinct scopes. Physical social engineering can be combined when the company also wants to assess on-site access controls.
Is WPA2 still considered secure?+
It depends on the configuration. WPA3 is preferable, but a well-configured WPA2-Enterprise can be adequate; obsolete protocols such as WEP, and features like WPS, should be disabled.
Next step
Want to validate the security of your corporate wireless network?
Tell us the locations, how many Wi-Fi networks exist and whether captive portals are in use.