FR 514 918-3381 Free quote
External penetration testing

External penetration testing: what Internet attackers see

Firewall, VPN, email, websites, remote access: we map everything your company exposes online and check that nothing gives way.

  • 15+ years’ experience
  • Across Quebec
  • Free quote
  • Bilingual service
The service

External penetration testing: what Internet attackers see

An attacker always starts from the outside. An external penetration test reproduces that step: discovering your IP addresses, domains and subdomains, identifying exposed services (VPN, portals, remote access, email, forgotten cameras or devices), searching for known vulnerabilities and attempting controlled access. We also check public credential leaks tied to your domains.

What we install

  • Mapping of addresses, domains and subdomains
  • Exposed services: VPN, RDP, portals, cameras, devices
  • Known vulnerabilities and missing patches
  • Authentication testing (without locking accounts)
  • Email security: SPF, DKIM, DMARC
  • Credential leaks tied to your domains
  • TLS and certificate configuration
  • Prioritized report and retest
Process

How a project runs

  1. Authorized addresses and domains
  2. Reconnaissance and mapping
  3. Vulnerability research and validation
  4. Controlled exploitation
  5. Report and retest
Free tool

Take the cybersecurity self-assessment

Open the calculator
Cybersecurity

All our cybersecurity services

Firewall and cybersecurityA well-configured firewall, a segmented network, secure remote access and filtering: the basics that stop most attacks.Network auditIs your network slow, dropping or too expensive? We measure before concluding, then fix it.Penetration testingWe attack your network the way an intruder would, within a scope agreed with you, and hand you a prioritized fix plan.Web application penetration testingCustomer portal, online store, SaaS app or API: we look for the flaws an attacker would exploit, before they do.Internal penetration testingIf a computer is compromised or a visitor plugs in a device, how far can they go? We measure it, from the network up to the domain controller.Wi-Fi penetration testingWi-Fi spills into the parking lot. We check that an intruder outside can’t connect or hop from the guest network to the internal one.Secure code reviewWe read your code to find what outside testing can’t see: secrets, logic flaws, vulnerable dependencies and forgotten access checks.Social engineering and phishing simulationMost attacks start with an email or a call. We measure how your teams react, without shaming anyone, then train them.Vulnerability scanningRegular scanning of your computers, servers and devices to know what isn’t patched, with a prioritized list — not 3,000 alerts.Security configuration reviewMisconfigurations cause as many incidents as vulnerabilities. We review your critical settings against recognized good practice.Physical security assessmentDoors, cards, keys, cameras, server room: we check whether someone can get in where they shouldn’t, and tell you how to stop them.
FAQ

Frequently asked questions

Do we need to notify our ISP or hosting provider?

For services hosted by a third party (cloud, host), we check their rules and obtain any required authorization before starting.

Can the test take our Internet down?

Risky techniques are excluded or scheduled; authentication tests are paced so accounts don’t lock.

How often should we run an external test?

At least yearly and after major changes: new firewall, new remote access, new website.

Planning external penetration testing?

Describe your situation in a few lines; an engineer will call you back quickly. The site visit and quote are free.

Quote

Request a quote

Free, no obligation. A quick answer from an engineer, in English or French.

  • Free site visit and quote
  • An engineer, not a salesperson
  • 15+ years’ experience, across Quebec
  • Hardware stocked on altea.io

Your details are only used to reply to you.

Updated 2026-11-05

CallQuote