FR 514 918-3381 Free quote
Internal penetration testing

Internal penetration testing and Active Directory

If a computer is compromised or a visitor plugs in a device, how far can they go? We measure it, from the network up to the domain controller.

  • 15+ years’ experience
  • Across Quebec
  • Free quote
  • Bilingual service
The service

Internal penetration testing and Active Directory

Most ransomware succeeds because once inside, everything is reachable. The internal test starts from a realistic foothold — an employee workstation or a network jack in a meeting room — and tries to reach your critical data: lateral movement, weak or reused passwords, open shares, Active Directory weaknesses, missing segmentation between cameras, printers and servers.

What we install

  • “Compromised workstation” or “open network jack” scenario
  • Network and device discovery
  • Active Directory and service-account weaknesses
  • Weak, reused or cleartext passwords
  • File shares and excessive permissions
  • Segmentation: cameras, IoT, printers, servers
  • Path to data and backups
  • Report, remediation plan and retest
Process

How a project runs

  1. Choice of scenario and starting point
  2. Internal reconnaissance
  3. Privilege escalation and lateral movement
  4. Reaching agreed objectives
  5. Report and retest
Free tool

Take the cybersecurity self-assessment

Open the calculator
Cybersecurity

All our cybersecurity services

Firewall and cybersecurityA well-configured firewall, a segmented network, secure remote access and filtering: the basics that stop most attacks.Network auditIs your network slow, dropping or too expensive? We measure before concluding, then fix it.Penetration testingWe attack your network the way an intruder would, within a scope agreed with you, and hand you a prioritized fix plan.Web application penetration testingCustomer portal, online store, SaaS app or API: we look for the flaws an attacker would exploit, before they do.External penetration testingFirewall, VPN, email, websites, remote access: we map everything your company exposes online and check that nothing gives way.Wi-Fi penetration testingWi-Fi spills into the parking lot. We check that an intruder outside can’t connect or hop from the guest network to the internal one.Secure code reviewWe read your code to find what outside testing can’t see: secrets, logic flaws, vulnerable dependencies and forgotten access checks.Social engineering and phishing simulationMost attacks start with an email or a call. We measure how your teams react, without shaming anyone, then train them.Vulnerability scanningRegular scanning of your computers, servers and devices to know what isn’t patched, with a prioritized list — not 3,000 alerts.Security configuration reviewMisconfigurations cause as many incidents as vulnerabilities. We review your critical settings against recognized good practice.Physical security assessmentDoors, cards, keys, cameras, server room: we check whether someone can get in where they shouldn’t, and tell you how to stop them.
FAQ

Frequently asked questions

Do you need to come on site?

Not necessarily: we can ship a small device to plug into your network, or work from a provided workstation. A visit is useful to also test physical access.

Will you read our data?

No. We prove access (a screenshot of a folder listing, for example) without copying or reading contents, per the agreed rules.

Are backups included?

Yes, checking whether an attacker can reach or wipe backups is a standard objective.

Planning internal penetration testing?

Describe your situation in a few lines; an engineer will call you back quickly. The site visit and quote are free.

Quote

Request a quote

Free, no obligation. A quick answer from an engineer, in English or French.

  • Free site visit and quote
  • An engineer, not a salesperson
  • 15+ years’ experience, across Quebec
  • Hardware stocked on altea.io

Your details are only used to reply to you.

Updated 2026-11-05

CallQuote