Our Methodology
See exactly how we take organizations from gap analysis to audit-ready, framework by framework.
Tools & Techniques
External Network Penetration Test
4 phases / 1-2 weeks typical
01 / Engagement Timeline
Phase-by-Phase Breakdown
Click any phase to see activities, deliverables, and responsibilities.
Activities
- Passive reconnaissance using OSINT frameworks and public data sources
- DNS enumeration, subdomain discovery, and certificate transparency log analysis
- Network range identification and perimeter asset mapping via Shodan and Censys
- Technology fingerprinting and service version detection across exposed hosts
Deliverables
- External attack surface inventory with all discovered hosts and services
- OSINT findings report with exposed credentials, data leaks, and metadata
- Network topology map of externally reachable infrastructure
Your Role
- Provide authorized IP ranges and domains in scope
- Confirm rules of engagement and testing windows
- Designate an emergency point of contact during testing
TFS Team
02 / Outcomes That Matter
Engagement Outcomes
Across every framework engagement, our methodology delivers consistent, measurable outcomes.
Average Days to Audit-Ready
Fastest engagements: 67 days | Typical SaaS: 3-4 months | Complex multi-framework: 6+ months
Unresolved Findings on First Audit
Client Re-engagement Rate
Frameworks Delivered
* Metrics reflect historical engagement data. Timelines assume baseline security controls, engaged client team, and timely access to systems. Individual results vary based on organizational maturity and scope. See our Terms of Service for details.
03 / Quality Assurance
Built-in Quality Gates
Every deliverable passes through multiple quality checkpoints before it reaches your team or your auditor.
Dual-Practitioner Model
Our engagements are staffed with at least two senior practitioners. No single point of failure, no knowledge silos.
Peer Review of All Deliverables
Every policy, assessment report, and evidence package is peer-reviewed by a practitioner who did not author it.
Evidence Validation Checklist
A structured checklist validates evidence completeness, accuracy, formatting, and auditor-readiness before submission.
Auditor Pre-submission Review
Before any evidence package reaches the auditor, a final QA pass simulates the auditor's review methodology.