The 5-day rapid assessment

This is a different kind of engagement than our full penetration test: tighter scope, fixed five-day timeline, fixed price, no surprises. It exists for teams who want a fast, credible answer about their internal network exposure without the multi-week calendar hold and larger invoice a full-scope engagement requires.

The five days cover testing and reporting. Scoping and the live debrief sit outside that window and are not billed against it, and the finished written report follows three to five business days after testing wraps, not on day five itself. A critical finding is never held for the final write-up; you hear about it the day it is confirmed.

The methodology is built around a well-known, publicly documented checklist of the Active Directory attack paths and hardening gaps responsible for the overwhelming majority of real-world internal compromises: LLMNR/NBT-NS/WPAD poisoning, NTLM relay, Kerberoasting, flat privileged access, weak credential hygiene, and thin logging coverage. We do not review your policy documents against it; we verify each item directly against your live environment, and we exploit what we find to confirm it is real rather than theoretical.

Depth is traded for breadth on purpose. We are not trying to find everything that could theoretically be wrong with your network in five days. We are finding the handful of things most likely to actually get you compromised, ranking them by real impact, and telling you which to fix first.